level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.60283ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="112.423µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=4.669658ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="16.121µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.516849ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="55.961µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="27.62µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="107.453µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="101.723µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="118.463µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="659.716µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.61µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.792833ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.560681ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="38.401µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.791µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="197.315µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="159.244µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="82.322µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.065415ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="89.742µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.721µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.321µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.212032ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="10.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.873328ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.312504ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.12µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.361µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="86.262µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="264.677µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.12µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="213.115µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="748.7µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.261911ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.38µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.25µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.189" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.189}] 10.0.0.0/24 [] [] 10.0.0.106 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37733" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.65477097s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="18.841µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.32µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="49.811µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="4.31µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1569 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.621456409s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=322.741063ms file-path=/var/run/cilium/state/templates/18afdea86b701284211edf1ba7e6f86855fad2fbcf31c8a32f795ac1320544be/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1569 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 c7806754-dbe6-47b2-b994-968fdbb071e7 default }" containerID=5d658330835030b2a13c7f725fcf822b94f5b85d47f21734b1307fdc87e76428 datapathConfiguration="&{false false false false false }" interface=lxce3e75dafa684 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d65833083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 ipv4=10.0.0.83 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d65833083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.83 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 e048ef67-1482-41c2-9f39-75a52f9a9a2f default }" containerID=78bb18344bc382748caa2cd37e72e594f98d0368c8b379c63410fc8d82b552c3 datapathConfiguration="&{false false false false false }" interface=lxc7b4cdc496c10 k8sPodName=kube-system/coredns-7c96b6546b-gr49q labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=78bb18344b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78bb18344b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d65833083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=21347 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.83 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=5d65833083 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=21347 ipv4=10.0.0.83 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=78bb18344b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78bb18344b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=33462 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78bb18344b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=33462 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 ipv4=10.0.0.106 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identityLabels="reserved:health" ipv4=10.0.0.106 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=4 identityLabels="reserved:health" ipv4=10.0.0.106 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.08511848s file-path=/var/run/cilium/state/templates/bf442817cd8b852d1065bc89479418dcc01e4d096320e957d97175621d252ba4/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=460 identity=4 ipv4=10.0.0.106 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d65833083 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=273 identity=21347 ipv4=10.0.0.83 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d65833083 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=273 identity=21347 ipv4=10.0.0.83 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=78bb18344b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1798 identity=33462 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q subsys=endpoint level=info msg="Successful endpoint creation" containerID=78bb18344b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1798 identity=33462 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d65833083 endpointID=273 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-bfhxh subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b8b37c76-98ee-4941-ac77-d2f4899cb225 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=5d65833083 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=273 identity=21347 ipv4=10.0.0.83 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bfhxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 b347ce37-027b-4a69-8c37-9d6af4b6ba3b default }" containerID=6bc5f0cdd58aca8ba8def8dc9dab381835599fd7463381d0640007707c6ad84b datapathConfiguration="&{false false false false false }" interface=lxca514b1b4ad2b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bc5f0cdd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bc5f0cdd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6bc5f0cdd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bc5f0cdd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=64451 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bc5f0cdd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=64451 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bc5f0cdd5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=454 identity=64451 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bc5f0cdd5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=454 identity=64451 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-c8dbp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1569 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01569 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01569 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01569 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01569:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1569 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 55034b0e-d4d5-4a29-a7f0-de7b4ebd8e5b default }" containerID=829946ae6a3b28592dd3d9cde08cb8d4152dd3f01a03505e8e7d3400e163e6f2 datapathConfiguration="&{false false false false false }" interface=lxc24d709257217 k8sPodName=kube-system/coredns-67659f764b-5j7x2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=829946ae6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-5j7x2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=829946ae6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-5j7x2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=829946ae6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identity=33462 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-5j7x2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=829946ae6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identity=33462 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-5j7x2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 b174cea7-cf22-4211-9e6b-09ec2de1c2b2 default }" containerID=0ff2aedf03ea15c2c86385f0232bb7462ec8e978c860cc083049c536d1f6a8c8 datapathConfiguration="&{false false false false false }" interface=lxcd2b201778a9a k8sPodName=kube-system/coredns-67659f764b-khj2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ff2aedf03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-khj2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ff2aedf03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-khj2f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0ff2aedf03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=33462 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-khj2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ff2aedf03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=33462 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-khj2f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=829946ae6a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2085 identity=33462 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-5j7x2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=829946ae6a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2085 identity=33462 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-67659f764b-5j7x2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0ff2aedf03 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=159 identity=33462 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-khj2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ff2aedf03 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=159 identity=33462 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-khj2f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.79 28599fa1-c69e-40ba-a398-c171c372ea50 default }" containerID=b8f5cdd938cb3d6c819c780f59f2c01e05cebe115cf6c2e11b55311c31ffbbe3 datapathConfiguration="&{false false false false false }" interface=lxc926978193537 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-56q6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8f5cdd938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-56q6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8f5cdd938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-56q6h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8f5cdd938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=55712 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-56q6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8f5cdd938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3217 identity=55712 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-56q6h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b8f5cdd938 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3217 identity=55712 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-56q6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8f5cdd938 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3217 identity=55712 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-56q6h subsys=daemon level=info msg="Delete endpoint request" containerID=78bb18344b endpointID=1798 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-gr49q subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=78bb18344b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1798 identity=33462 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gr49q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 45c4c291-1312-4e91-896c-4bfa82c60a8b default }" containerID=37f651b3f3b1a6744158b33c2260f3e5540e5a008267a41bb75bae1c5d51ea66 datapathConfiguration="&{false false false false false }" interface=lxc7a083b63b464 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xpqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37f651b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xpqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37f651b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xpqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.161 3d978f68-5af7-49a1-aa7a-e94f8be1bde1 default }" containerID=fdc25d222ea8db18b01afa681c5c9a2ec1ad1d7f00220459d7910c946ff5c32d datapathConfiguration="&{false false false false false }" interface=lxcfd0913f44af3 k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdc25d222e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdc25d222e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37f651b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=39779 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xpqk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=37f651b3f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=39779 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xpqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=fdc25d222e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 line=611 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 9c4ef98b-f277-4d2b-ae77-7ff22eb9c88a default }" containerID=4928aacb4ef56d511fccadbb3bd2e08fde9d38662b93f74692d3306d4abb74b1 datapathConfiguration="&{false false false false false }" interface=lxcf6f1b29897f3 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hnfmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4928aacb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hnfmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4928aacb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hnfmr subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdc25d222e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identity=9862 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdc25d222e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identity=9862 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4928aacb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=44088 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hnfmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4928aacb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=44088 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hnfmr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37f651b3f3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=655 identity=39779 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xpqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=37f651b3f3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=655 identity=39779 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xpqk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fdc25d222e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3969 identity=9862 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdc25d222e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3969 identity=9862 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lcx46 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4928aacb4e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2155 identity=44088 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hnfmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=4928aacb4e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2155 identity=44088 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hnfmr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.218 c64b9ecd-205c-4f78-8688-945328bf5680 default }" containerID=c9f011b2295abe3a7ab58ba2b062d66f6dc4184e9b993b5a3626a8da4f00e0d6 datapathConfiguration="&{false false false false false }" interface=lxc330885731767 k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9f011b229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 ipv4=10.0.0.218 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9f011b229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=13941dd3-7473-4a15-9926-2188b0e195de,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=13941dd3-7473-4a15-9926-2188b0e195de,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.218 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=13941dd3-7473-4a15-9926-2188b0e195de;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=13941dd3-7473-4a15-9926-2188b0e195de;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9f011b229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=22925 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=13941dd3-7473-4a15-9926-2188b0e195de,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=13941dd3-7473-4a15-9926-2188b0e195de,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.218 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9f011b229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=22925 ipv4=10.0.0.218 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9f011b229 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1730 identity=22925 ipv4=10.0.0.218 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9f011b229 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1730 identity=22925 ipv4=10.0.0.218 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9f011b229 endpointID=1730 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-m96tc subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=13941dd3-7473-4a15-9926-2188b0e195de k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=13941dd3-7473-4a15-9926-2188b0e195de k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c9f011b229 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1730 identity=22925 ipv4=10.0.0.218 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m96tc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 1c67bb5c-5b38-420c-a7ed-6ccf65e7b391 default }" containerID=90876f50c423edca96fc45a6390f72a862e32f695e7dee5ac51623ab1148c1ba datapathConfiguration="&{false false false false false }" interface=lxc804fd0d972a8 k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90876f50c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90876f50c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=90876f50c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90876f50c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=12961 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90876f50c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=12961 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90876f50c4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=28 identity=12961 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=90876f50c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=28 identity=12961 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90876f50c4 endpointID=28 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lbwqr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=9cb5848f-2062-45f9-81fb-c81ad5d58cff k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=90876f50c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=28 identity=12961 ipv4=10.0.0.35 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lbwqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 7e4e1629-d24c-41a4-be42-5a561c73b05d default }" containerID=2fcde919cf3837143a5ed66acd97d7051bba5f3ec66cbd16e869fa8b25b5014c datapathConfiguration="&{false false false false false }" interface=lxc5ee11d5abb46 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fcde919cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fcde919cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2fcde919cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2fcde919cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=24295 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fcde919cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=24295 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fcde919cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=451 identity=24295 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fcde919cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=451 identity=24295 ipv4=10.0.0.81 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-c6mjp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 59a61fa2-eae8-40cc-8bd8-32df8b4addc9 default }" containerID=a672279fc29b612a102b502db47f458f66ea32601c0b6c6144d8d35f394691c0 datapathConfiguration="&{false false false false false }" interface=lxc73310075e253 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a672279fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a672279fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a672279fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=14432 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a672279fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=14432 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a672279fc2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=529 identity=14432 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a672279fc2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=529 identity=14432 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a672279fc2 endpointID=529 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-6hnbh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=57e8a9e8-fa73-42ae-a1f8-5489ea9d2a95 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=a672279fc2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=529 identity=14432 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6hnbh subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2660ec84-559e-4b94-8aa4-36ee3cd47a62] Description:}]" policyAddRequest=1315e747-4ec0-4d39-94b8-a52e9b9666ff subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1315e747-4ec0-4d39-94b8-a52e9b9666ff policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=52085ae7-cd0d-437f-849b-f8b0399bd76c] Description:}]" policyAddRequest=7e9c30f3-3610-4865-a755-ae20f4383a0f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7e9c30f3-3610-4865-a755-ae20f4383a0f policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.246 0b5ba4c0-5a5f-445a-af45-29da6c6f2b63 default }" containerID=4a120b337c6ef8b5009ef9499adea9cfe7e4b7d6f2f363281b202b591288e468 datapathConfiguration="&{false false false false false }" interface=lxcfe4ecb498220 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a120b337c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a120b337c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a120b337c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a120b337c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identity=15162 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a120b337c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identity=15162 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a120b337c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3265 identity=15162 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a120b337c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3265 identity=15162 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-xbgdb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 06058880-1911-4a69-bc6a-666d91f8630f default }" containerID=3cf5af6bd098c0201c249b7fe8c3b9853d90bdc287bdbd5effc931bce12e5e80 datapathConfiguration="&{false false false false false }" interface=lxc6ea5b2d46d97 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rrjtq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cf5af6bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rrjtq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cf5af6bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rrjtq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cf5af6bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=9036 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rrjtq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cf5af6bd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=9036 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rrjtq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cf5af6bd0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3252 identity=9036 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rrjtq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cf5af6bd0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3252 identity=9036 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-rrjtq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 58e8205e-9c0d-4da6-8a2e-8bf0a66e45f4 default }" containerID=96677f34789f13517d39b4aae4400fc4c7f39d38269eab3aef2f2499f9bb741c datapathConfiguration="&{false false false false false }" interface=lxc4c4628a6eb50 k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96677f3478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96677f3478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96677f3478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96677f3478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=17488 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96677f3478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=17488 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96677f3478 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2254 identity=17488 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=96677f3478 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2254 identity=17488 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-d6xcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 1d535437-7b5b-4a49-b0dd-bb39fc8a755f default }" containerID=40c43bf89dae875ed9045f69365da9a99d958fd603639b2cb2074fc61269b982 datapathConfiguration="&{false false false false false }" interface=lxc0a022c4790e0 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40c43bf89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40c43bf89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40c43bf89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=56109 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40c43bf89d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=56109 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40c43bf89d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=423 identity=56109 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40c43bf89d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=423 identity=56109 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.190 b9501632-c14d-42d6-a2ec-8a97cb2cbba2 default }" containerID=65018f9b2a5c0ef163c0279954f4fb1960cc33c08a40e51e2b725ec5f8315d16 datapathConfiguration="&{false false false false false }" interface=lxc3c0b1a61ff52 k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65018f9b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65018f9b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65018f9b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65018f9b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65018f9b2a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=106 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65018f9b2a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=106 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65018f9b2a endpointID=106 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=65018f9b2a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=106 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5973eccc-ed65-4744-a0cf-6d6dd80d7a33 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 5668b634-bf99-4997-832d-46b501f851f2 default }" containerID=c1517423565dff73202a2706d74a4cfb4722d4d379ac3142da7b87e2568ac649 datapathConfiguration="&{false false false false false }" interface=lxcf3a9a106d809 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c151742356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c151742356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c151742356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=61791 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c151742356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=61791 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c151742356 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=62 identity=61791 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c151742356 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=62 identity=61791 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ccbcd9ab-e596-4259-ba60-017823073835] Description:}]" policyAddRequest=1f7bd08e-8626-463b-b5b6-e6fe3dbe4567 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1f7bd08e-8626-463b-b5b6-e6fe3dbe4567 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.190 6c3e5724-f927-458b-8e1d-a5bb8a102e73 default }" containerID=f5b918075399ae7ad21e25756bac46c8ad3722b1c4a9163c98e156b9dfb18370 datapathConfiguration="&{false false false false false }" interface=lxc3ec522f76a4a k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5b9180753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5b9180753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5b9180753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5b9180753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5b9180753 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=784 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5b9180753 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=784 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 subsys=daemon level=info msg="Delete endpoint request" containerID=f5b9180753 endpointID=784 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f5b9180753 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=784 identity=43185 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05c0cb60-9228-43e2-bcc3-55bf8aaeb437 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 c188e59d-3010-4a6a-a25f-8990f84f8608 default }" containerID=6aefac142fa4c8cc32c0ef59f8882c327d19f1923571c6169b60cd0a7da3df5c datapathConfiguration="&{false false false false false }" interface=lxccb61de86f92a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6aefac142f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6aefac142f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6aefac142f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6aefac142f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=47700 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6aefac142f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=47700 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ddcf472e-bcf8-40a5-a167-6f1deaf02966] Description:}]" policyAddRequest=71959368-0bc3-4b4e-8a1a-bff427ec9e9f subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=71959368-0bc3-4b4e-8a1a-bff427ec9e9f policyRevision=5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6aefac142f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3458 identity=47700 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6aefac142f datapathPolicyRevision=5 desiredPolicyRevision=4 endpointID=3458 identity=47700 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 851a21fc-3561-4438-a3ba-93ff8fc23727 default }" containerID=bcd6c83f2bce0535e7e87b4c1dc91cfcc71db8f50152ebd73a6febd9bc415655 datapathConfiguration="&{false false false false false }" interface=lxc00485afd96a7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcd6c83f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcd6c83f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcd6c83f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=30756 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcd6c83f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=30756 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcd6c83f2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=30756 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcd6c83f2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=30756 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008660570562852543 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.232 8b934fe9-8dc7-42cf-8541-541073f842d7 default }" containerID=13c841a0cbfbd8cd7fa45630e5f0e89f5f599e518caca87bb35d76c3ba244b0f datapathConfiguration="&{false false false false false }" interface=lxc8553d69b824b k8sPodName=monitoring/node-feature-discovery-worker-n9lzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13c841a0cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n9lzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13c841a0cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n9lzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13c841a0cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=6058 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n9lzq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=13c841a0cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=6058 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n9lzq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 fdd4940f-505a-4b86-9981-c6f883934ae8 default }" containerID=8f055db2cdf38d3d4168b3e13ac3c76c01f0701b746d56dec2c40e8c600f07ed datapathConfiguration="&{false false false false false }" interface=lxcb497ae887fb2 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbwk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f055db2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbwk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f055db2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbwk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f055db2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=34677 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbwk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f055db2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=34677 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbwk5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13c841a0cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=558 identity=6058 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n9lzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=13c841a0cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=558 identity=6058 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n9lzq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f055db2cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=120 identity=34677 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbwk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f055db2cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=120 identity=34677 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lbwk5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.73 c1d36df7-865f-44a1-b8ed-f551604fdbfd default }" containerID=aa2ed42eba0d040a1ee9691777c13159e1594e04a797fa90e0b0effe9cd2f3b4 datapathConfiguration="&{false false false false false }" interface=lxc6b1f9c73f7cd k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-79w4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa2ed42eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-79w4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa2ed42eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-79w4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa2ed42eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=17271 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-79w4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa2ed42eba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=975 identity=17271 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-79w4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa2ed42eba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=975 identity=17271 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-79w4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa2ed42eba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=975 identity=17271 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-79w4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 a940578b-eafc-4909-a658-0e3392790118 default }" containerID=f92ca49b8109d331170e9afdc39b67e12d2aa841eb183d58789ebde3d3f6cca1 datapathConfiguration="&{false false false false false }" interface=lxcd9c901ebb095 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xjx4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f92ca49b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xjx4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f92ca49b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xjx4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f92ca49b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 identity=23640 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xjx4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f92ca49b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3441 identity=23640 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xjx4r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f92ca49b81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3441 identity=23640 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xjx4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=f92ca49b81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3441 identity=23640 ipv4=10.0.0.76 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xjx4r subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1569 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01569 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01569 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01569 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01569:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1569 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 2465fdca-c05e-41c8-8489-08b6d4961106 default }" containerID=81026bc5a0b79df13278437dc1b18c066f64aa9c8955c14855057848867fb6ac datapathConfiguration="&{false false false false false }" interface=lxcd8872a1f5c3e k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81026bc5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81026bc5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81026bc5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81026bc5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=15498 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81026bc5a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=15498 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81026bc5a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=15498 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=81026bc5a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=15498 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81026bc5a0 endpointID=2386 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-g6dbv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1cf23c95-4e98-47c6-bf06-62aaf28a31c7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=81026bc5a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=15498 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-g6dbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 1edcce91-0119-45f5-b216-a808e45ae60d default }" containerID=449d394c0f301fede57d907c7aa2fa2f88cb4808b3a3c2a5cac81e081576ebde datapathConfiguration="&{false false false false false }" interface=lxcaf867b105e5e k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tqz9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=449d394c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tqz9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=449d394c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tqz9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=449d394c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=30174 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tqz9l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=449d394c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=30174 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tqz9l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 6ee50976-3600-4e1f-9453-c3ab229be5dc default }" containerID=0bbf8283f0f09a515cd1c624cf08bcfa2329ae2587fdededca665c0f707a8ffe datapathConfiguration="&{false false false false false }" interface=lxc18be65caa452 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlcn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bbf8283f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlcn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bbf8283f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlcn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bbf8283f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=43258 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlcn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bbf8283f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=43258 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlcn4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=449d394c0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=962 identity=30174 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tqz9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=449d394c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=962 identity=30174 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tqz9l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0bbf8283f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=459 identity=43258 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlcn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bbf8283f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=43258 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qlcn4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 c80f72c4-dc82-4afa-af34-fe77237d8c39 default }" containerID=1229fc1512600e7d021ea91ded0fb6ccb6341599c2273263532a8563b0b895e9 datapathConfiguration="&{false false false false false }" interface=lxc03ef9995d0ef k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbd887bfd-wb98z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1229fc1512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbd887bfd-wb98z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1229fc1512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbd887bfd-wb98z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1229fc1512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=59684 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbd887bfd-wb98z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1229fc1512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=59684 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbd887bfd-wb98z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1229fc1512 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1189 identity=59684 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbd887bfd-wb98z subsys=endpoint level=info msg="Successful endpoint creation" containerID=1229fc1512 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1189 identity=59684 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5cbd887bfd-wb98z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 71e3244f-3aa3-44d5-a6ad-1f7b87c872d0 default }" containerID=9de08044b6e43af5f6560fdf31f30143c096892977dd51c8946caae9910226e9 datapathConfiguration="&{false false false false false }" interface=lxcb5583b097731 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9de08044b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9de08044b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9de08044b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=36648 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9de08044b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=36648 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9de08044b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3569 identity=36648 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz subsys=endpoint level=info msg="Successful endpoint creation" containerID=9de08044b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3569 identity=36648 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9de08044b6 endpointID=3569 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-vdffz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9cc252b7-2693-4dc6-8876-04135f36221b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9de08044b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3569 identity=36648 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vdffz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 3e937136-7ec9-493a-a9e8-f591873de4cb default }" containerID=4d020b4350542873da8ffb4a76fdf63ea6dcb21e77597b1723f937a47469ceeb datapathConfiguration="&{false false false false false }" interface=lxca8973dff36c9 k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d020b4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d020b4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d020b4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d020b4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 identity=43185 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d020b4350 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3817 identity=43185 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d020b4350 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3817 identity=43185 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.41 231d0f72-5f05-471b-84d2-d6a47f218a70 default }" containerID=e7d14655b8eba28f123e0e3840083c69d2c87f59b15546131a8a91779833bfca datapathConfiguration="&{false false false false false }" interface=lxc9a596d297559 k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d14655b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d14655b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e7d14655b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d14655b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=43185 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d14655b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=204 identity=43185 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d14655b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=204 identity=43185 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 subsys=daemon level=info msg="Delete endpoint request" containerID=4d020b4350 endpointID=3817 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4d020b4350 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3817 identity=43185 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-72ba5443-0636-4b53-b533-31fa6acfcade subsys=endpoint level=info msg="Delete endpoint request" containerID=e7d14655b8 endpointID=204 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e7d14655b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=204 identity=43185 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff5a23c3-b49b-4434-a3c9-e2f9f1424db1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 99fc20ae-f9a6-407d-9e39-6abf6ec5c1f6 default }" containerID=d4d0f617de2aec1011404d9cfbea67c020b992f8eb6c8a126a5c13c076f1e505 datapathConfiguration="&{false false false false false }" interface=lxcb2914bddfa8d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4d0f617de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4d0f617de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4d0f617de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=21563 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4d0f617de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=21563 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d4d0f617de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1414 identity=21563 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4d0f617de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1414 identity=21563 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 4d48b5b3-28a9-426c-8a96-2208c6848f92 default }" containerID=0e5bccddaca6195f59733a060fb4984c9513b776ce7b3da29c2898b7aa7bf3da datapathConfiguration="&{false false false false false }" interface=lxcc0a9ab3695c2 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e5bccddac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e5bccddac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e5bccddac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=3965 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e5bccddac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=3965 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e5bccddac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1262 identity=3965 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e5bccddac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1262 identity=3965 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.216 51176e6e-dbb1-472f-9b02-078263c5b5ca default }" containerID=1c6582ab0cb8fff0ae5b996fcfdd9a2e720ecbdc26405fb84f4b4561d0a674a6 datapathConfiguration="&{false false false false false }" interface=lxcb339864959b3 k8sPodName=monitoring/loki-gateway-cf54cb88c-vt5b4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c6582ab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vt5b4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c6582ab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vt5b4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.94 f610a08c-6562-4d0d-9aaa-a1360dfb4776 default }" containerID=344ebe49e182fbfc3f53ad9de28fcebe71bd414019fa4bfd2faf04bb9e663c2a datapathConfiguration="&{false false false false false }" interface=lxc4cf761e52cc4 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=344ebe49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=344ebe49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c6582ab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=16023 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vt5b4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c6582ab0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=16023 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vt5b4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.9 1e4d7666-9ce1-41cc-aa9d-ea7b34c80781 default }" containerID=205265d2f74957807b02d655ef3a6e83347a54ef1587d464bb5eaacdf148fc1d datapathConfiguration="&{false false false false false }" interface=lxc8537f08ff2b6 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=205265d2f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 c903f5b9-a0c0-4e16-a849-a1eb9d89d882 default }" containerID=1199213d481885c5e709e66286dafa19c71c0837f7df70323622f2cb901421ae datapathConfiguration="&{false false false false false }" interface=lxcd48eebe250ca k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1199213d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1199213d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=205265d2f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c6582ab0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2999 identity=16023 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vt5b4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c6582ab0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=16023 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vt5b4 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=344ebe49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=55834 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Waiting for endpoint to be generated" containerID=344ebe49e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=55834 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1199213d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=1199213d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=43185 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=205265d2f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=3992 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=205265d2f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=3992 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=344ebe49e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=466 identity=55834 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=344ebe49e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=466 identity=55834 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1199213d48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3661 identity=43185 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1199213d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3661 identity=43185 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=205265d2f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=585 identity=3992 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=205265d2f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=585 identity=3992 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 315976c9-3e1e-4436-bd08-ddacd3c4e786 default }" containerID=f64bb03dd8b0b02cd0d378d978ccce541c3697bb95f03a7c0e42362170cc4bf3 datapathConfiguration="&{false false false false false }" interface=lxc4015786f034c k8sPodName=monitoring/vector-txjwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f64bb03dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-txjwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f64bb03dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-txjwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f64bb03dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=2248 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-txjwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f64bb03dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=2248 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-txjwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f64bb03dd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1542 identity=2248 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-txjwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=f64bb03dd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1542 identity=2248 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-txjwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1199213d48 endpointID=3661 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1199213d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3661 identity=43185 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8fd0f668-effd-4052-b438-c17a879d3a35 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 c552756f-73ba-4879-91e9-0b891533b960 default }" containerID=f333eff2085152542b0b4602b1f4e8a4f4440f25169490f604e509c66980f556 datapathConfiguration="&{false false false false false }" interface=lxcc2b5858f3af3 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f333eff208 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f333eff208 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f333eff208 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=56452 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f333eff208 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=56452 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f333eff208 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=110 identity=56452 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f333eff208 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=56452 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 6cefcc47-d600-46d3-b384-7242c3e28a7f default }" containerID=f7ece820fccb764a72822ed193a6f8346a5095fbd7a547c391a504bc7b30d044 datapathConfiguration="&{false false false false false }" interface=lxca15bb2686cc8 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nxkpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7ece820fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nxkpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7ece820fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nxkpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f7ece820fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=4406 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nxkpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7ece820fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=4406 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nxkpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7ece820fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=4406 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nxkpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7ece820fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=4406 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-nxkpz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 d18d9945-e9c7-4f06-80b2-961870599231 default }" containerID=dc1ab82623b854eb3a148fb43be2ade801a9ee08f2c0f33e248305fd9d4ac60d datapathConfiguration="&{false false false false false }" interface=lxcdd3ed68068b0 k8sPodName=openstack/memcached-memcached-6479589586-mnnd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc1ab82623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mnnd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc1ab82623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mnnd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc1ab82623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=12337 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mnnd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc1ab82623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=12337 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mnnd7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc1ab82623 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=698 identity=12337 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mnnd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc1ab82623 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=698 identity=12337 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-mnnd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 01e750e6-4e95-4712-b4dd-152b3609a1c1 default }" containerID=70d73cb0408c380f6697dbc73cb3b4f9242b05b2c5f7dc1ed15966fb2bc43586 datapathConfiguration="&{false false false false false }" interface=lxce263e8b3e2d6 k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70d73cb040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70d73cb040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70d73cb040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70d73cb040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=43185 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70d73cb040 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3423 identity=43185 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb subsys=endpoint level=info msg="Successful endpoint creation" containerID=70d73cb040 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=43185 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb subsys=daemon level=info msg="Delete endpoint request" containerID=70d73cb040 endpointID=3423 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=70d73cb040 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=43185 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7672f44c-7c28-4aab-8857-4a0e03503ebb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 6deb7044-0502-4609-95cf-5343a9fd39e6 default }" containerID=693dbc0b9a4c013775bcd5598019aae2476bb20ba7f8b0f99c1b6f5b2a8b4a37 datapathConfiguration="&{false false false false false }" interface=lxc50f5e188b1f3 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=693dbc0b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=693dbc0b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=693dbc0b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=693dbc0b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identity=52238 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=693dbc0b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identity=52238 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=693dbc0b9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=751 identity=52238 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=693dbc0b9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=751 identity=52238 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 667c57c1-949f-44b3-8848-a9d598cb18ec default }" containerID=0db3e927247a73c7f6d219a6fff175cd0c38d6fb90a2e1855f5794a49687c4e1 datapathConfiguration="&{false false false false false }" interface=lxcf50019075123 k8sPodName=openstack/keystone-api-7958f97ff9-wx9nr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0db3e92724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-api-7958f97ff9-wx9nr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0db3e92724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-api-7958f97ff9-wx9nr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0db3e92724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=11697 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-api-7958f97ff9-wx9nr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0db3e92724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1064 identity=11697 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-api-7958f97ff9-wx9nr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 b4461045-00e1-4748-84f2-81f4923ee8b1 default }" containerID=ec4eb007a01fe941c7a5892d0933808ade95f87ef60810d6a31ddd3fa24ba945 datapathConfiguration="&{false false false false false }" interface=lxc3cb8d6ccb8e9 k8sPodName=openstack/keystone-credential-setup-fmsnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec4eb007a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-credential-setup-fmsnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec4eb007a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-credential-setup-fmsnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec4eb007a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=18467 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-credential-setup-fmsnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec4eb007a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=18467 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-credential-setup-fmsnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0db3e92724 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1064 identity=11697 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-api-7958f97ff9-wx9nr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0db3e92724 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1064 identity=11697 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-api-7958f97ff9-wx9nr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec4eb007a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2176 identity=18467 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-credential-setup-fmsnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec4eb007a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=18467 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-credential-setup-fmsnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec4eb007a0 endpointID=2176 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fmsnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=aec065a9-b796-414d-bfbf-e86a195d172d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ec4eb007a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=18467 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-credential-setup-fmsnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 6b8f75a0-8f88-4761-a558-2cb70eae439e default }" containerID=e59b2ff3848a911bc67eff30876424b630b3f94e30bcffa992c4a6f5cc035c9a datapathConfiguration="&{false false false false false }" interface=lxcbc97803c9016 k8sPodName=openstack/keystone-db-init-hwfwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e59b2ff384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-db-init-hwfwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e59b2ff384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-db-init-hwfwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e59b2ff384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=12035 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-db-init-hwfwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e59b2ff384 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=12035 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-db-init-hwfwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e59b2ff384 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=388 identity=12035 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-db-init-hwfwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e59b2ff384 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=388 identity=12035 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-db-init-hwfwp subsys=daemon level=info msg="Delete endpoint request" containerID=e59b2ff384 endpointID=388 k8sNamespace=openstack k8sPodName=keystone-db-init-hwfwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=60648d6b-29c8-4b41-9cbf-d19fcdab5a2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e59b2ff384 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=388 identity=12035 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-db-init-hwfwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 e55640ec-eff4-4461-9c41-00c2d65abc0f default }" containerID=ed82c3a68cfb2ba0bcfa37d2915273828c4d81c6b2b1a24f9d476dbaa0c2f38c datapathConfiguration="&{false false false false false }" interface=lxc4a6f4d562495 k8sPodName=openstack/keystone-fernet-setup-x7plw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed82c3a68c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed82c3a68c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ed82c3a68c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ed82c3a68c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 identity=460 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed82c3a68c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2356 identity=460 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed82c3a68c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2356 identity=460 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed82c3a68c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2356 identity=460 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed82c3a68c endpointID=2356 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-x7plw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=80ecb31b-50c8-4de0-97b2-35d681ef75f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ed82c3a68c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2356 identity=460 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-fernet-setup-x7plw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 c87098da-ca23-4a1a-a282-5c69d7d57ae3 default }" containerID=6d2166ea00fc0764824f65827b4bf9ba26d960b97fcd2fd2577e6cc2de1260b8 datapathConfiguration="&{false false false false false }" interface=lxcc3af644eeaa2 k8sPodName=openstack/keystone-db-sync-2jhq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d2166ea00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1208 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-db-sync-2jhq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d2166ea00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1208 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-db-sync-2jhq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d2166ea00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1208 identity=4209 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-db-sync-2jhq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d2166ea00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1208 identity=4209 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-db-sync-2jhq5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6d2166ea00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1208 identity=4209 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-db-sync-2jhq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d2166ea00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1208 identity=4209 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-db-sync-2jhq5 subsys=daemon level=info msg="Delete endpoint request" containerID=6d2166ea00 endpointID=1208 k8sNamespace=openstack k8sPodName=keystone-db-sync-2jhq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=782984cf-ad9c-4ca0-b14c-3937c84fc9a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6d2166ea00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1208 identity=4209 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/keystone-db-sync-2jhq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 b75860fe-c204-47da-bdac-d0a9be32b897 default }" containerID=e32ee3535ef284992f605cb2d2ed00ce6e1a86c85ef8fd78a4e0b4bda9fb58cc datapathConfiguration="&{false false false false false }" interface=lxc02a39bac6bbb k8sPodName=openstack/keystone-rabbit-init-dz96c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e32ee3535e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3772 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-dz96c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e32ee3535e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3772 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-dz96c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e32ee3535e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3772 identity=37477 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-dz96c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e32ee3535e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3772 identity=37477 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-dz96c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e32ee3535e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3772 identity=37477 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-dz96c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e32ee3535e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3772 identity=37477 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-dz96c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e32ee3535e endpointID=3772 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-dz96c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a9efd08c-80d1-4d24-a979-78246bcba05f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e32ee3535e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3772 identity=37477 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-rabbit-init-dz96c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 5ec311a3-ae66-4eef-b0ec-40b46d64fc75 default }" containerID=458799a389c6a6280c5f43dde1193500b51f8f2e1e014aa17722391fa37bd9da datapathConfiguration="&{false false false false false }" interface=lxc0f28dfe4caa4 k8sPodName=openstack/keystone-domain-manage-d2rls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=458799a389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-d2rls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=458799a389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-d2rls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=458799a389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=8231 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-d2rls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=458799a389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=539 identity=8231 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-d2rls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=458799a389 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=539 identity=8231 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-d2rls subsys=endpoint level=info msg="Successful endpoint creation" containerID=458799a389 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=539 identity=8231 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-d2rls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=458799a389 endpointID=539 k8sNamespace=openstack k8sPodName=keystone-domain-manage-d2rls subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=2d357acc-3dd8-43bc-82d5-f96a8964c090 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=458799a389 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=539 identity=8231 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-domain-manage-d2rls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 583ef62d-1543-4ee2-8f8c-07476b4c26f2 default }" containerID=16fad503c26c02462ad8dbe7b494e160cfa922163b38bf47ef7bdc5adfd25fbc datapathConfiguration="&{false false false false false }" interface=lxca0b6576d6f6e k8sPodName=openstack/keystone-bootstrap-4w9nk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16fad503c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-4w9nk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16fad503c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-4w9nk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16fad503c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=13549 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-4w9nk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=16fad503c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3934 identity=13549 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-4w9nk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16fad503c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3934 identity=13549 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-4w9nk subsys=endpoint level=info msg="Successful endpoint creation" containerID=16fad503c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3934 identity=13549 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-4w9nk subsys=daemon level=info msg="Delete endpoint request" containerID=16fad503c2 endpointID=3934 k8sNamespace=openstack k8sPodName=keystone-bootstrap-4w9nk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=a30ec131-cf5b-483f-a277-1c70d58a7a2c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=16fad503c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3934 identity=13549 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-4w9nk subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03416546052186616 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.10 8dc75584-010f-4ef6-8b99-69f603519c1a default }" containerID=60ecfe19b3b166d2361b27271381b880d4d9ff4bb4367ea75eb26f0d7fc96dec datapathConfiguration="&{false false false false false }" interface=lxc8fb025a1a51e k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60ecfe19b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60ecfe19b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60ecfe19b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60ecfe19b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=43185 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60ecfe19b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1535 identity=43185 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb subsys=endpoint level=info msg="Successful endpoint creation" containerID=60ecfe19b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=43185 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb subsys=daemon level=info msg="Delete endpoint request" containerID=60ecfe19b3 endpointID=1535 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=60ecfe19b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=43185 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1752572-7304-4429-8af5-28167ae679eb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 57f700ce-b268-4b45-b2a3-32042a247a8a default }" containerID=a1bc797b2c6bd59545e47359c39390990d3539269e9b2a183fbcf7938d955aa2 datapathConfiguration="&{false false false false false }" interface=lxc1a41416ea26d k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1bc797b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1bc797b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1bc797b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=15688 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1bc797b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=15688 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a1bc797b2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=15688 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1bc797b2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=15688 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 80fba2ad-19d2-4946-91fb-ace49aab99b5 default }" containerID=ec96a4f0520665a52814151c3f3c2909c25534ca1137d416a3d01f34e21a6bb7 datapathConfiguration="&{false false false false false }" interface=lxceb5a7451a40f k8sPodName=openstack/barbican-api-5cb994fc78-t4qmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec96a4f052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-api-5cb994fc78-t4qmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec96a4f052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-api-5cb994fc78-t4qmr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec96a4f052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identity=61518 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-api-5cb994fc78-t4qmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec96a4f052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identity=61518 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-api-5cb994fc78-t4qmr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 6662ad2c-a1aa-4047-bd45-5bc31c6700b1 default }" containerID=821ccc9ba085a9a6f4ed46afde9c7b279898d2f553b6b52b281d0f57632867ab datapathConfiguration="&{false false false false false }" interface=lxc36e1c2ac9cce k8sPodName=openstack/barbican-db-init-4pr8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=821ccc9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-4pr8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=821ccc9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=002aa828-e200-4763-ab83-4dce60e3004d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=002aa828-e200-4763-ab83-4dce60e3004d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-4pr8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=002aa828-e200-4763-ab83-4dce60e3004d;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=002aa828-e200-4763-ab83-4dce60e3004d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=821ccc9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=18276 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=002aa828-e200-4763-ab83-4dce60e3004d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=002aa828-e200-4763-ab83-4dce60e3004d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-4pr8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=821ccc9ba0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=18276 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-4pr8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec96a4f052 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1864 identity=61518 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-api-5cb994fc78-t4qmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec96a4f052 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1864 identity=61518 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-api-5cb994fc78-t4qmr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=821ccc9ba0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=559 identity=18276 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-4pr8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=821ccc9ba0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=18276 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-4pr8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=821ccc9ba0 endpointID=559 k8sNamespace=openstack k8sPodName=barbican-db-init-4pr8s subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=002aa828-e200-4763-ab83-4dce60e3004d k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=002aa828-e200-4763-ab83-4dce60e3004d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=821ccc9ba0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=18276 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-4pr8s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 6c5f1fa9-ecba-4819-a75d-96ceceffb0d2 default }" containerID=e6fbe128181d0b67fd84dcc311bf0469ddc16042d2a1ea23fd57fe529268c2cd datapathConfiguration="&{false false false false false }" interface=lxccba89db6afeb k8sPodName=openstack/barbican-db-sync-6pl9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6fbe12818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-db-sync-6pl9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6fbe12818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-db-sync-6pl9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6fbe12818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=30167 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-db-sync-6pl9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6fbe12818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=30167 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-db-sync-6pl9f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e6fbe12818 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=278 identity=30167 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-db-sync-6pl9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6fbe12818 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=278 identity=30167 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-db-sync-6pl9f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6fbe12818 endpointID=278 k8sNamespace=openstack k8sPodName=barbican-db-sync-6pl9f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=84e071ca-89e4-4625-969d-3d40ff38bca3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e6fbe12818 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=278 identity=30167 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-db-sync-6pl9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 62ce4783-f21d-46f3-8dc1-1ac82a94049f default }" containerID=b4a856a7f5eb221d637b19be5d03208c145e29cc55b78836c2be9108ecd190f9 datapathConfiguration="&{false false false false false }" interface=lxce9e9528d23f8 k8sPodName=openstack/barbican-rabbit-init-m6l5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4a856a7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6l5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4a856a7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6l5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4a856a7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=4216 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6l5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4a856a7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=4216 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6l5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4a856a7f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2084 identity=4216 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6l5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4a856a7f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=4216 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6l5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4a856a7f5 endpointID=2084 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-m6l5x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=acf1869e-21e9-4bf2-98fb-27b79a37f9c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b4a856a7f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=4216 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6l5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 abaed661-cbe9-4161-8172-0e8db6a96375 default }" containerID=654df5a1f999278a70865150f39367a17fe485feade33a5fe00b07d31d6507be datapathConfiguration="&{false false false false false }" interface=lxc1b3183a0d172 k8sPodName=openstack/barbican-ks-service-5sf8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=654df5a1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2790 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-service-5sf8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=654df5a1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2790 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-service-5sf8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=654df5a1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2790 identity=37728 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-service-5sf8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=654df5a1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2790 identity=37728 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-service-5sf8x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=654df5a1f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2790 identity=37728 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-service-5sf8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=654df5a1f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2790 identity=37728 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-service-5sf8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=654df5a1f9 endpointID=2790 k8sNamespace=openstack k8sPodName=barbican-ks-service-5sf8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a760c2a3-4044-4df7-bc58-f0c711500504 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=654df5a1f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2790 identity=37728 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-service-5sf8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 83d45aa6-7938-43b5-81dc-5400be642a1d default }" containerID=da8ac9b78cc40433b2348d7b173c4e2c8572dd5fa92534537a092aa65df52f3c datapathConfiguration="&{false false false false false }" interface=lxc149e1bfbf049 k8sPodName=openstack/barbican-ks-endpoints-sp8g8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da8ac9b78c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sp8g8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da8ac9b78c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sp8g8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da8ac9b78c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=15718 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sp8g8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da8ac9b78c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=15718 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sp8g8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=da8ac9b78c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=15718 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sp8g8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da8ac9b78c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=15718 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sp8g8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da8ac9b78c endpointID=905 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-sp8g8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=16bfea72-2bd7-4c83-bfae-c33eb2401254 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=da8ac9b78c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=15718 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sp8g8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 7c3a8292-9e9f-40bf-ba21-eda7fa1dfc4a default }" containerID=d3011169f32eb95b2cda5d935fc09c3b5101bcaabb2a818303d34245800ec6e9 datapathConfiguration="&{false false false false false }" interface=lxc21cbbf3a8dfe k8sPodName=openstack/barbican-ks-user-2ztzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3011169f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-2ztzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3011169f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-2ztzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3011169f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=58812 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-2ztzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3011169f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=58812 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-2ztzx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3011169f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1389 identity=58812 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-2ztzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3011169f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=58812 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-2ztzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3011169f3 endpointID=1389 k8sNamespace=openstack k8sPodName=barbican-ks-user-2ztzx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=3a764112-bc3d-425b-b500-995298ecbf3c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d3011169f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=58812 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-user-2ztzx subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.115 68f268af-f780-4bda-8952-bcc1d881656b default }" containerID=cc874faa11fafe8e03e1bf55d4752cde76f4e726cea4060d164978a3a1b1cb79 datapathConfiguration="&{false false false false false }" interface=lxc8065ec837c37 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc874faa11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 ipv4=10.0.0.115 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc874faa11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.115 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cc874faa11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc874faa11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=58845 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.115 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc874faa11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=58845 ipv4=10.0.0.115 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc874faa11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2249 identity=58845 ipv4=10.0.0.115 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc874faa11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2249 identity=58845 ipv4=10.0.0.115 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7bgdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 f68325cc-63f7-4669-8196-74ba6b29c1ae default }" containerID=478f47af11f3d8599f02cde951ec558edd467f6cba622b7010a64d0dd23769ab datapathConfiguration="&{false false false false false }" interface=lxcf85d9879e0a3 k8sPodName=openstack/rook-ceph-detect-version-jzxtt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=478f47af11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=478f47af11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=478f47af11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=478f47af11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=348 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=478f47af11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=348 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=478f47af11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1496 identity=348 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt subsys=endpoint level=info msg="Successful endpoint creation" containerID=478f47af11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1496 identity=348 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=478f47af11 endpointID=1496 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-jzxtt subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e4918f9c-5e19-40f4-a1cf-3e6c1759774f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=478f47af11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1496 identity=348 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jzxtt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 05127f72-16d4-4d7f-bcc0-6119b309b4a2 default }" containerID=cda9e08ae0a8c2ed3f21ec41fe3c248f98b9810c4f6c5f55db87826c74696ad0 datapathConfiguration="&{false false false false false }" interface=lxc9fa13760fb36 k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cda9e08ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cda9e08ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cda9e08ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cda9e08ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=21212 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cda9e08ae0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3585 identity=21212 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cda9e08ae0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3585 identity=21212 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=cda9e08ae0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3585 identity=21212 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cda9e08ae0 endpointID=3585 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-jqhqs subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d887c6be-791e-45d2-b547-b8d3a3f1b627 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cda9e08ae0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3585 identity=21212 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-jqhqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 e86c317e-0279-4fe0-bd52-e3200a0c7e30 default }" containerID=6b6be1d1889f1a1ddd9d44c9a3ad6142de5fbab7f715ab483fe8528bec3848bf datapathConfiguration="&{false false false false false }" interface=lxc5cd54489ffc0 k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b6be1d188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3597 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b6be1d188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b6be1d188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3597 identity=43185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b6be1d188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3597 identity=43185 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b6be1d188 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3597 identity=43185 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b6be1d188 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3597 identity=43185 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 subsys=daemon level=info msg="Delete endpoint request" containerID=6b6be1d188 endpointID=3597 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6b6be1d188 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3597 identity=43185 ipv4=10.0.0.240 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d6a4daac-bbad-45a0-bdb4-71586ff46067 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 a9567794-28d6-4b64-bb76-7dba2255fe17 default }" containerID=b3966643f3980c37906293aca248bb53f34521706b6a537276cd00f00a6baba3 datapathConfiguration="&{false false false false false }" interface=lxcfba57e6ec81b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3966643f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3966643f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b3966643f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3966643f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=33981 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3966643f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=33981 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3966643f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2211 identity=33981 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3966643f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2211 identity=33981 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 7f03926c-7a95-48e5-b0d7-d3b4f244b45d default }" containerID=291aed89615e635af68a0ffe24d3c77584f70a980c32c21aeb77ad19b42ab7a9 datapathConfiguration="&{false false false false false }" interface=lxcadb397396c36 k8sPodName=openstack/glance-db-init-ssfqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=291aed8961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ssfqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=291aed8961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d87d5707-891c-4850-a816-41fa432919bb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d87d5707-891c-4850-a816-41fa432919bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ssfqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d87d5707-891c-4850-a816-41fa432919bb;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=d87d5707-891c-4850-a816-41fa432919bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=291aed8961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=64203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d87d5707-891c-4850-a816-41fa432919bb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d87d5707-891c-4850-a816-41fa432919bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ssfqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=291aed8961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=64203 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ssfqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=291aed8961 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1486 identity=64203 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ssfqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=291aed8961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1486 identity=64203 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ssfqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 e0925dba-94f4-41e9-9263-2c9ca495aca1 default }" containerID=ee555c0129e0827afa11190e5c533333a64385f41a48b4ea93044dc556498c66 datapathConfiguration="&{false false false false false }" interface=lxc2a716b8e8144 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wjq2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee555c0129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wjq2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee555c0129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wjq2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee555c0129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=49373 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wjq2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee555c0129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1270 identity=49373 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wjq2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee555c0129 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1270 identity=49373 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wjq2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee555c0129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1270 identity=49373 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wjq2c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 9dfe13d6-cbfc-4140-984b-c1a092ddd52b default }" containerID=2fadd50481066b4c16e7871497a35aec4ca9c38275440b78b21ae69cfe9037d5 datapathConfiguration="&{false false false false false }" interface=lxc3e7987a5d842 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7lgm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fadd50481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7lgm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fadd50481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7lgm6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fadd50481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=3070 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7lgm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fadd50481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=3070 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7lgm6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fadd50481 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2641 identity=3070 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7lgm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fadd50481 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=3070 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7lgm6 subsys=daemon level=info msg="Delete endpoint request" containerID=291aed8961 endpointID=1486 k8sNamespace=openstack k8sPodName=glance-db-init-ssfqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d87d5707-891c-4850-a816-41fa432919bb k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=d87d5707-891c-4850-a816-41fa432919bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=291aed8961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1486 identity=64203 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ssfqb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 85c3a930-f44c-4873-a8e6-35d606e742e0 default }" containerID=6478b23ca980b9cdceedf8149f9b95ba52737ad4e47fa6a5406efa1ddbadf632 datapathConfiguration="&{false false false false false }" interface=lxc55173f12eac7 k8sPodName=openstack/glance-db-sync-dzs7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6478b23ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-db-sync-dzs7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6478b23ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-db-sync-dzs7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6478b23ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=60486 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-db-sync-dzs7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6478b23ca9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=60486 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-db-sync-dzs7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6478b23ca9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1982 identity=60486 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-db-sync-dzs7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6478b23ca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1982 identity=60486 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-db-sync-dzs7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6478b23ca9 endpointID=1982 k8sNamespace=openstack k8sPodName=glance-db-sync-dzs7r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=aadcf4bb-4ad7-47cf-bff4-1175d4a77afd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6478b23ca9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1982 identity=60486 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-db-sync-dzs7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 a949f623-3c98-4259-b66b-b59fae1abef4 default }" containerID=e99426706fac616fdeaff392929e19499a08aa5c96a160533d1076eddbf5fd19 datapathConfiguration="&{false false false false false }" interface=lxc40553b62c592 k8sPodName=openstack/glance-rabbit-init-sd44l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e99426706f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e99426706f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e99426706f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e99426706f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=2152 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e99426706f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=2152 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e99426706f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=516 identity=2152 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l subsys=endpoint level=info msg="Successful endpoint creation" containerID=e99426706f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=516 identity=2152 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e99426706f endpointID=516 k8sNamespace=openstack k8sPodName=glance-rabbit-init-sd44l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e78a05cf-daa9-40aa-81ec-249c0fd32933 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e99426706f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=516 identity=2152 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/glance-rabbit-init-sd44l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 660b0c20-11cc-4226-a976-feaf531c7f7c default }" containerID=03426a70a5a77887d0736a25925123c3f56d0f07a92b4059e798292a112363c8 datapathConfiguration="&{false false false false false }" interface=lxca055a9afd28f k8sPodName=openstack/glance-ks-service-fd58v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03426a70a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-service-fd58v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03426a70a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-service-fd58v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03426a70a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identity=18099 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-service-fd58v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=03426a70a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identity=18099 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-service-fd58v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03426a70a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2624 identity=18099 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-service-fd58v subsys=endpoint level=info msg="Successful endpoint creation" containerID=03426a70a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2624 identity=18099 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-service-fd58v subsys=daemon level=info msg="Delete endpoint request" containerID=03426a70a5 endpointID=2624 k8sNamespace=openstack k8sPodName=glance-ks-service-fd58v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=796e5fa7-ddbd-4fe3-8aed-1cca5f0bf019 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=03426a70a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2624 identity=18099 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-service-fd58v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 b6f3af15-8767-4c73-a3ae-4a54e0fa4d3e default }" containerID=b18ca40ce7433b4173801dde2a5fc9c7d4f83eddf1237f65ef0dd0d90cc5c480 datapathConfiguration="&{false false false false false }" interface=lxc9e92a22ec809 k8sPodName=openstack/glance-ks-endpoints-dww7j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b18ca40ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b18ca40ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b18ca40ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b18ca40ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=1835 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b18ca40ce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=1835 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b18ca40ce7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2349 identity=1835 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j subsys=endpoint level=info msg="Successful endpoint creation" containerID=b18ca40ce7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=1835 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b18ca40ce7 endpointID=2349 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-dww7j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f1e18cb1-4e8b-43da-8f78-c60272863e43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b18ca40ce7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=1835 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-endpoints-dww7j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 2beb6d12-4e71-4815-b797-29f1946fa920 default }" containerID=49c1865e64b24a1d0caf36e3c2e2665b5e9a0ff6d14e2830841c2a711ac64614 datapathConfiguration="&{false false false false false }" interface=lxcd9bf1835ab8d k8sPodName=openstack/glance-ks-user-f4p8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49c1865e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49c1865e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=49c1865e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=49c1865e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=20708 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49c1865e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=20708 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49c1865e64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=65 identity=20708 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=49c1865e64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=20708 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49c1865e64 endpointID=65 k8sNamespace=openstack k8sPodName=glance-ks-user-f4p8f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=4a13f725-4afb-4514-ae21-06727b5ec55d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=49c1865e64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=20708 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-user-f4p8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 f74fd491-5578-4da8-8880-d98c497265d5 default }" containerID=19d3b3de198a2e91f4b1e986d2db9a85fa4c703a407997d863110f23318130be datapathConfiguration="&{false false false false false }" interface=lxc86f571653d1d k8sPodName=openstack/glance-metadefs-load-p7rfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19d3b3de19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19d3b3de19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=19d3b3de19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19d3b3de19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=56332 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19d3b3de19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=56332 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19d3b3de19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2742 identity=56332 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=19d3b3de19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2742 identity=56332 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19d3b3de19 endpointID=2742 k8sNamespace=openstack k8sPodName=glance-metadefs-load-p7rfb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=f4307e8f-5792-4ab0-8fc7-1b5bd82d9e40 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=19d3b3de19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2742 identity=56332 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-metadefs-load-p7rfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 d5c3c37a-20e9-4ad2-be97-83921264bb4a default }" containerID=be63714bb9be2322624ee926c8038fe283dd619983721511cc85fb673a8c83c0 datapathConfiguration="&{false false false false false }" interface=lxc0f4928197f35 k8sPodName=openstack/glance-storage-init-22lfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be63714bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-storage-init-22lfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be63714bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=401573b1-e519-44df-b1ee-654af247ec56,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=401573b1-e519-44df-b1ee-654af247ec56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-storage-init-22lfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=401573b1-e519-44df-b1ee-654af247ec56;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=401573b1-e519-44df-b1ee-654af247ec56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be63714bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=20932 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=401573b1-e519-44df-b1ee-654af247ec56,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=401573b1-e519-44df-b1ee-654af247ec56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-storage-init-22lfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be63714bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=20932 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-storage-init-22lfm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be63714bb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3349 identity=20932 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-storage-init-22lfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=be63714bb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3349 identity=20932 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-storage-init-22lfm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be63714bb9 endpointID=3349 k8sNamespace=openstack k8sPodName=glance-storage-init-22lfm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=401573b1-e519-44df-b1ee-654af247ec56 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=401573b1-e519-44df-b1ee-654af247ec56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=be63714bb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3349 identity=20932 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-storage-init-22lfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 6a979f3e-8d18-4321-bcb2-d06249a9b885 default }" containerID=59dc909d558eae5e65b01e39c57b33034b26c9bb4fa730fb1c200d5f35e853f7 datapathConfiguration="&{false false false false false }" interface=lxcb06ea7d17828 k8sPodName=openstack/glance-api-76679c76dd-tnv6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59dc909d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-api-76679c76dd-tnv6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59dc909d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-api-76679c76dd-tnv6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59dc909d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=59358 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-api-76679c76dd-tnv6b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=59dc909d55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=59358 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-api-76679c76dd-tnv6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59dc909d55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1671 identity=59358 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-api-76679c76dd-tnv6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=59dc909d55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=59358 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-api-76679c76dd-tnv6b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 8f8c8216-2aca-40ac-b32e-ee0eb57dbbc9 default }" containerID=d62b02daae7538d0414d798cf7cf060aa85717d5293b925856a66bd9053a629e datapathConfiguration="&{false false false false false }" interface=lxc103d2ae315b2 k8sPodName=openstack/staffeln-api-6979f5565f-ngsl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d62b02daae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/staffeln-api-6979f5565f-ngsl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d62b02daae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/staffeln-api-6979f5565f-ngsl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d62b02daae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=404 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/staffeln-api-6979f5565f-ngsl9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d62b02daae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=404 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/staffeln-api-6979f5565f-ngsl9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 bf3dfdc3-851b-437c-b5d2-a0bc8dd0772b default }" containerID=565f410443dd614d404f0af1467211f4d9970dd7557310ff94436cca7dbe7ce7 datapathConfiguration="&{false false false false false }" interface=lxcf95f48cc368c k8sPodName=openstack/staffeln-db-init-5bfwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=565f410443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-init-5bfwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=565f410443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-init-5bfwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=565f410443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=26535 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-init-5bfwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=565f410443 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=26535 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-init-5bfwg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 2a19d540-8bc6-4794-bebc-a395d79e01bd default }" containerID=37495c48d6f468d0a279aafcd9b1a65d08688e2edc9ee94d297b8112ac537099 datapathConfiguration="&{false false false false false }" interface=lxc5af813c03f86 k8sPodName=openstack/staffeln-conductor-59c8f9fc84-bhcc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37495c48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-59c8f9fc84-bhcc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37495c48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-59c8f9fc84-bhcc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37495c48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=1808 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-59c8f9fc84-bhcc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37495c48d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=1808 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-59c8f9fc84-bhcc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d62b02daae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1216 identity=404 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/staffeln-api-6979f5565f-ngsl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d62b02daae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1216 identity=404 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/staffeln-api-6979f5565f-ngsl9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=565f410443 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1050 identity=26535 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-init-5bfwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=565f410443 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1050 identity=26535 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-init-5bfwg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=37495c48d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=20 identity=1808 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-59c8f9fc84-bhcc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37495c48d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=20 identity=1808 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/staffeln-conductor-59c8f9fc84-bhcc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=565f410443 endpointID=1050 k8sNamespace=openstack k8sPodName=staffeln-db-init-5bfwg subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=514d1914-2212-42e2-88bd-c054fc0bec3e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=565f410443 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1050 identity=26535 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-init-5bfwg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 80528986-1516-48cb-87a2-f16d3e1fb426 default }" containerID=ca821acd29f8dc66983776a9ce61f005f1a73c5746361b2e6274348066dbd759 datapathConfiguration="&{false false false false false }" interface=lxca839e9240320 k8sPodName=openstack/staffeln-db-sync-97gzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca821acd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-db-sync-97gzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca821acd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=29b4b630-f6ae-4320-9684-e2a7cbc959e4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=29b4b630-f6ae-4320-9684-e2a7cbc959e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-db-sync-97gzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=29b4b630-f6ae-4320-9684-e2a7cbc959e4;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=29b4b630-f6ae-4320-9684-e2a7cbc959e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca821acd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=17654 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=29b4b630-f6ae-4320-9684-e2a7cbc959e4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=29b4b630-f6ae-4320-9684-e2a7cbc959e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-db-sync-97gzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca821acd29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=17654 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-db-sync-97gzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca821acd29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1666 identity=17654 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-db-sync-97gzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca821acd29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1666 identity=17654 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/staffeln-db-sync-97gzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager