level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.243617ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="64.502µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.307758ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.27µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.407446ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.35µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.441µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="74.612µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="86.823µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="88.873µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="492.385µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.971µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=7.960672ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.198529ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="214.187µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="161.925µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="434.122µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="240.747µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="237.767µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.438197ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="266.857µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="34.911µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.51.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.517735ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.406174ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="11.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.532069ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.631µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.63µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="80.373µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="348.09µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.15µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="239.067µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="985.819µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.858655ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.4µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.911µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.51 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.51 ipAddr.ipv6="" k8sNodeIP=199.19.213.51 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.51" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.67" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.51" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.51} {CiliumInternalIP 10.0.0.67}] 10.0.0.0/24 [] [] 10.0.0.231 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38723" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.072852571s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="137.114µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="20.45µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="68.782µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="20.301µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.048861144s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=334.667734ms file-path=/var/run/cilium/state/templates/49b57e3e0cf59ab0790cf5f18f792b02a6cb1850a947574467ed3a9da6d6714d/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.131 2a6a151a-5604-43e6-80f1-5b4bcdb6e956 default }" containerID=2288be4ae45bec7bf8d113146baed2f84a1356d165c910912f64e83797775167 datapathConfiguration="&{false false false false false }" interface=lxc45bf81c9f4bb k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nl2dw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2288be4ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nl2dw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2288be4ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nl2dw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2288be4ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 identity=56716 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nl2dw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2288be4ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3901 identity=56716 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nl2dw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 6ad4b15d-910b-4738-8fd1-519cd0615d7b default }" containerID=723eee5ef81aa17ccf2a78f3628df29beb444fea81e01c066c8b5880c234187b datapathConfiguration="&{false false false false false }" interface=lxce49711f75409 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbsfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=723eee5ef8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbsfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=723eee5ef8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbsfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=723eee5ef8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=17949 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbsfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=723eee5ef8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=17949 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbsfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 f088b945-e623-469f-a517-18099e67f036 default }" containerID=fd9733dabdf7d7189523cc22459b5970fd98cda4a759d54818518469f386c463 datapathConfiguration="&{false false false false false }" interface=lxc300a5162b470 k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd9733dabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd9733dabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd9733dabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=17110 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd9733dabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=17110 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2995 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 d25466b8-204f-4cc7-819a-2678e2f8d7ac default }" containerID=e7308670ca8b05e288dcdd6626a679d199378bcd67ea3934d6e00df1c51bac9c datapathConfiguration="&{false false false false false }" interface=lxc8dce793df7ca k8sPodName=kube-system/coredns-67659f764b-qs4t4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7308670ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-qs4t4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7308670ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-qs4t4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.136 69599e28-6c61-4ef6-90d8-80d23dc09afa default }" containerID=c42e29af5dd5500da3cdc6fadf6e6a98518b0b79463bdf53a57611857b8207f1 datapathConfiguration="&{false false false false false }" interface=lxcadecc58489d4 k8sPodName=kube-system/coredns-67659f764b-6dtmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c42e29af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6dtmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c42e29af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6dtmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 4f57f2ed-3c5f-496a-b1c8-a2fcafa0edaf default }" containerID=6b335371e0c4682208174e25d1684093788822a906c5fce08dedd110c294eabe datapathConfiguration="&{false false false false false }" interface=lxce48ca947677d k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b335371e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 9565adae-eb27-483b-abd5-667b558d0ee7 default }" containerID=749f6baa4ac4ef091e6e2ac47d58a23bfa6151e1174aa1ed5b69662ebf0b4ff6 datapathConfiguration="&{false false false false false }" interface=lxc1f37b2b184e0 k8sPodName=kube-system/coredns-7c96b6546b-69x22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=749f6baa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-69x22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=749f6baa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-69x22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b335371e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 27cd414b-8ea4-4288-965b-bd0000ab9bd7 default }" containerID=a2a61508973535845a89a4746a556f436197f8caa7574a672427ccb413512cd9 datapathConfiguration="&{false false false false false }" interface=lxcf82aa745e45f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2a6150897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2a6150897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 ipv4=10.0.0.231 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identityLabels="reserved:health" ipv4=10.0.0.231 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=4 identityLabels="reserved:health" ipv4=10.0.0.231 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7308670ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=10902 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-qs4t4 oldIdentity="no identity" subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Waiting for endpoint to be generated" containerID=e7308670ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=10902 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-qs4t4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c42e29af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identity=10902 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6dtmq oldIdentity="no identity" subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Waiting for endpoint to be generated" containerID=c42e29af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3761 identity=10902 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6dtmq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=749f6baa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identity=10902 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-69x22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=749f6baa4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1169 identity=10902 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-69x22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6b335371e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a2a6150897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.155739708s file-path=/var/run/cilium/state/templates/ee745d85a53f187c48b3995306eb82c3f3c00f8a0775603b93c27e5f4239db31/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=c42e29af5d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3761 identity=10902 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6dtmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c42e29af5d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3761 identity=10902 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-6dtmq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e7308670ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=780 identity=10902 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-qs4t4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7308670ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=780 identity=10902 ipv4=10.0.0.188 ipv6= k8sPodName=kube-system/coredns-67659f764b-qs4t4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2288be4ae4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3901 identity=56716 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nl2dw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2288be4ae4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3901 identity=56716 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nl2dw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=723eee5ef8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1648 identity=17949 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbsfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=723eee5ef8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1648 identity=17949 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gbsfl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fd9733dabd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=202 identity=17110 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd9733dabd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=202 identity=17110 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=749f6baa4a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1169 identity=10902 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-69x22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=749f6baa4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1169 identity=10902 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-69x22 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1101 identity=4 ipv4=10.0.0.231 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b335371e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identity=42773 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6b335371e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identity=42773 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b335371e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2762 identity=42773 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b335371e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2762 identity=42773 ipv4=10.0.0.32 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5ns8b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a2a6150897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2a6150897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=50477 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2a6150897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=50477 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2a6150897 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=711 identity=50477 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2a6150897 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=711 identity=50477 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zjnsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=749f6baa4a endpointID=1169 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-69x22 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=749f6baa4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1169 identity=10902 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-69x22 subsys=endpoint level=info msg="Delete endpoint request" containerID=fd9733dabd endpointID=202 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-g96ss subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=a1e0d997-d47a-4b3e-8a90-ab1d36a9dffc k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=fd9733dabd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=202 identity=17110 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g96ss subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 02ad76c7-8efc-4f38-a8c9-f6e95e1e8a8b default }" containerID=b0ef170adf991955777b0817929caba45eee26d20f6dd0c064b3643a042737f5 datapathConfiguration="&{false false false false false }" interface=lxc3d0a7659c484 k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0ef170adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0ef170adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b0ef170adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identity=35680 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0ef170adf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identity=35680 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0ef170adf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2595 identity=35680 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0ef170adf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2595 identity=35680 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0ef170adf endpointID=2595 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-qh6kd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=4bee2cc4-5c5b-4649-b4d8-87bc8321f4b9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b0ef170adf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2595 identity=35680 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qh6kd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 f8f22f6f-ec4c-462c-8429-04b1e3a12051 default }" containerID=4ed7bf856b8c83378895e783654e9800095805a48ed5f06c47390c530ef5949b datapathConfiguration="&{false false false false false }" interface=lxcdc2c8d0b8bc3 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ed7bf856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ed7bf856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4ed7bf856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4ed7bf856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identity=25323 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ed7bf856b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3223 identity=25323 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ed7bf856b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3223 identity=25323 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ed7bf856b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3223 identity=25323 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgp4v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 d7a838e8-4d96-4f9a-9f60-cebcf5fccb51 default }" containerID=e016ef4ae763c73c024560971401ae8f8d77618930c3e66f97df3a17b4acf4f0 datapathConfiguration="&{false false false false false }" interface=lxcaf75fcb745f2 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e016ef4ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e016ef4ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e016ef4ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=14622 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e016ef4ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=14622 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e016ef4ae7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=846 identity=14622 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e016ef4ae7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=846 identity=14622 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e016ef4ae7 endpointID=846 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-95th9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ce95d22f-0ac7-4b14-ad5a-4c0d5c07d555 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e016ef4ae7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=846 identity=14622 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-95th9 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8452c946-752b-4d98-b012-a05ab6fc283b] Description:}]" policyAddRequest=fbcffeb9-2033-4d8c-b60c-a6ae633c42f3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fbcffeb9-2033-4d8c-b60c-a6ae633c42f3 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b940871f-fd71-4f42-93ba-f617f1e70ecf] Description:}]" policyAddRequest=3d33c8f3-d204-48b6-b889-c080e4b854a7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3d33c8f3-d204-48b6-b889-c080e4b854a7 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.164 cd440527-7adc-4165-9b12-645d298f64d2 default }" containerID=c7854978ce8c9b9192821f26ea4d22b41bab3d120fab4544d23db900a287009f datapathConfiguration="&{false false false false false }" interface=lxca6e96853d902 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7854978ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7854978ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7854978ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7854978ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=58930 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7854978ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=58930 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7854978ce datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=876 identity=58930 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7854978ce datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=876 identity=58930 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-j5sg8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 0d2e054a-3bb7-475d-be49-7ca33d2053ce default }" containerID=56f85910c5bc0da51a732cc49c078e732c69017ad86edebb2e833bb2cd118070 datapathConfiguration="&{false false false false false }" interface=lxc7a461ad336a5 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-64jrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56f85910c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-64jrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56f85910c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-64jrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56f85910c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=35655 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-64jrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56f85910c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=35655 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-64jrw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56f85910c5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2919 identity=35655 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-64jrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=56f85910c5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2919 identity=35655 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-64jrw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 dfc3c80d-1e03-42a9-a386-cdb62d636967 default }" containerID=1be9a267ba9d9aa92a7a5c85700826a57a71607f93287bf48ed15eb453fc8e67 datapathConfiguration="&{false false false false false }" interface=lxc1c7edc688842 k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1be9a267ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1872 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1be9a267ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1872 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1be9a267ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1872 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1be9a267ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1872 identity=4569 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1be9a267ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1872 identity=4569 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1be9a267ba datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1872 identity=4569 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=1be9a267ba datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1872 identity=4569 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-skc4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 973c960f-03be-4ff4-bd9b-6c6961b0634b default }" containerID=99cf6b14718632e28f656ce4c78ad63f9c9070b4f9055b234c7f045e9cefb4bd datapathConfiguration="&{false false false false false }" interface=lxc38205b9c43aa k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99cf6b1471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99cf6b1471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99cf6b1471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=99cf6b1471 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=16565 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99cf6b1471 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1498 identity=16565 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d subsys=endpoint level=info msg="Successful endpoint creation" containerID=99cf6b1471 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1498 identity=16565 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 a697e9ba-9263-45fc-be13-01feff5274a7 default }" containerID=0c33ef955cb61b34ce7b83eb9e126c541a9cc70fd617ffca3270b5474d81d1be datapathConfiguration="&{false false false false false }" interface=lxcbc779c0d0569 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c33ef955c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c33ef955c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c33ef955c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=5202 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c33ef955c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=5202 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c33ef955c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=560 identity=5202 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c33ef955c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=560 identity=5202 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99cf6b1471 endpointID=1498 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=99cf6b1471 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1498 identity=16565 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-359b41d9-1fa1-43d8-ac8a-05d38677b06d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 2719fd67-388a-4cf9-92b5-d686cd43c2d7 default }" containerID=ea1af2b46863c861ea99aac422c518e7e634bec45ef11e37a9bd877b1c268011 datapathConfiguration="&{false false false false false }" interface=lxcef944a23ca07 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea1af2b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea1af2b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea1af2b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=3639 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea1af2b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=3639 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea1af2b468 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=285 identity=3639 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea1af2b468 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=285 identity=3639 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0f3d5d0d-00b3-43a1-b799-1f84757e1f40] Description:}]" policyAddRequest=85c06fe0-955c-4246-ae1d-749c127783b5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=85c06fe0-955c-4246-ae1d-749c127783b5 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.171 dfc7d1a3-f096-4cf6-ae9b-a9a1c729d0e1 default }" containerID=5893b443d8bc29fb360f86b35727a1faa3b4e997b5dc2e60d5c1e7a9c9b841ba datapathConfiguration="&{false false false false false }" interface=lxc1098ea79056b k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5893b443d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5893b443d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5893b443d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5893b443d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=16565 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5893b443d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=18 identity=16565 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5893b443d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=18 identity=16565 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 subsys=daemon level=info msg="Delete endpoint request" containerID=5893b443d8 endpointID=18 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5893b443d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=18 identity=16565 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89635df2-6fe7-4405-9a44-d8336e3070a6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 aa332e31-d626-4b3d-9343-e8863dd0142e default }" containerID=c4b9d96af835fbdafc91d44e1d2285110cf3bb5b1c7f5b7e76d66720d24ca671 datapathConfiguration="&{false false false false false }" interface=lxcd0e67b4949d6 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4b9d96af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4b9d96af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4b9d96af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=51433 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4b9d96af8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=51433 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4b9d96af8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1075 identity=51433 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4b9d96af8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1075 identity=51433 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=2c1c669f-627d-4085-a493-79ac527b1467] Description:}]" policyAddRequest=3ded6b9a-5536-4e3c-a71f-53cda6df24f3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3ded6b9a-5536-4e3c-a71f-53cda6df24f3 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.171 72bcbb70-f6b4-416a-a796-968a227ab0aa default }" containerID=9b77bd1eab65399f0e0541c261d2f7347a71fd4925f87b7e21e8ffcfdc1e51f6 datapathConfiguration="&{false false false false false }" interface=lxcc4444656ccb9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b77bd1eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 ipv4=10.0.0.171 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b77bd1eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.171 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b77bd1eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identity=60553 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.171 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9b77bd1eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identity=60553 ipv4=10.0.0.171 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b77bd1eab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1089 identity=60553 ipv4=10.0.0.171 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b77bd1eab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1089 identity=60553 ipv4=10.0.0.171 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00891419914239723 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.160 8b67c308-257e-49f6-a4d0-a67a7570fd80 default }" containerID=6484b6a403fc2284670241db89846241fc7cd830bb5fa2af145cacada0e29fd1 datapathConfiguration="&{false false false false false }" interface=lxc7e0d552a40cf k8sPodName=monitoring/node-feature-discovery-worker-5wkjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6484b6a403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5wkjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6484b6a403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5wkjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6484b6a403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=1994 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5wkjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6484b6a403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=1994 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5wkjk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 e44025be-01d2-477d-9202-9b301dfa41b9 default }" containerID=1706c465300b792c2a07ddab7a71c2b977c1eb11054503fce89b0bc59c11646f datapathConfiguration="&{false false false false false }" interface=lxc9d547cd0497a k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5q8d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1706c46530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5q8d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1706c46530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5q8d7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1706c46530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=13374 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5q8d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1706c46530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=13374 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5q8d7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 1a0893c2-1714-4977-99f9-67ed8aa7a4b4 default }" containerID=4e25edec678b785d3f3a603594803fd0a6240293f99a8b6f16e7e7621a3a6845 datapathConfiguration="&{false false false false false }" interface=lxcccb991245a59 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nq2hz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e25edec67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nq2hz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e25edec67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nq2hz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e25edec67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=6371 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nq2hz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e25edec67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=6371 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nq2hz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6484b6a403 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=471 identity=1994 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5wkjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6484b6a403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=1994 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5wkjk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1706c46530 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2132 identity=13374 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5q8d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1706c46530 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2132 identity=13374 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5q8d7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e25edec67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=6371 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nq2hz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e25edec67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=6371 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-nq2hz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 d6036fef-6def-4331-84c5-15898a8253ea default }" containerID=e0de2f85fb3abadb295a7dd27528ae14fdc19202a4842af14d6dd0df4e451e9b datapathConfiguration="&{false false false false false }" interface=lxc55df5464295c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l4nfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0de2f85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l4nfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0de2f85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l4nfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0de2f85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=18749 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l4nfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0de2f85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=917 identity=18749 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l4nfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0de2f85fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=917 identity=18749 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l4nfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0de2f85fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=917 identity=18749 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-l4nfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2995 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02995 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02995 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02995 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02995:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2995 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 a69ccd7d-06d9-4956-b66b-22d3baa7af93 default }" containerID=fe633adbaeb82193801d2326c60d229d77f8f4d317656190a7d2b644b5aa8355 datapathConfiguration="&{false false false false false }" interface=lxc776f07246e75 k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe633adbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe633adbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe633adbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=31038 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe633adbae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=31038 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe633adbae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=414 identity=31038 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe633adbae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=31038 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk subsys=daemon level=info msg="Delete endpoint request" containerID=fe633adbae endpointID=414 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-h69lk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a7aee5af-8709-43d2-b93e-151361b0b662 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fe633adbae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=414 identity=31038 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h69lk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 0a14bfe0-24d4-4748-8e72-e431b3eb01fb default }" containerID=ff48bf4cf529ad46be9b8baac77887c3d886dada2966a6418e23222adace1a71 datapathConfiguration="&{false false false false false }" interface=lxc444c80d1b34e k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff48bf4cf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff48bf4cf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ff48bf4cf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff48bf4cf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=62993 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff48bf4cf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=62993 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 9173091b-b03b-4b03-ac61-015c0aa606ad default }" containerID=361b5d5c2e2c939193b3e13064b76569a8a2eef9fe7cff7fa0db4394ac499309 datapathConfiguration="&{false false false false false }" interface=lxc16404092248d k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n6kq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=361b5d5c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n6kq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=361b5d5c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n6kq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=361b5d5c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=20283 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n6kq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=361b5d5c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=20283 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n6kq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 c0c38868-213d-4296-97d8-56804cc35ac6 default }" containerID=95811b57dd733733cb863fc464c161e6c438c12da16ffac042ce76424773f809 datapathConfiguration="&{false false false false false }" interface=lxc6218af4de71e k8sPodName=monitoring/kube-prometheus-stack-grafana-5d774965d-5drn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95811b57dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d774965d-5drn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95811b57dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d774965d-5drn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95811b57dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=14279 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d774965d-5drn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95811b57dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=14279 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d774965d-5drn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff48bf4cf5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=894 identity=62993 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff48bf4cf5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=894 identity=62993 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-82mmg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=95811b57dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2162 identity=14279 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d774965d-5drn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95811b57dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2162 identity=14279 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5d774965d-5drn6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=361b5d5c2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=75 identity=20283 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n6kq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=361b5d5c2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=20283 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-n6kq6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 b05ad999-006d-4ff4-8b9a-acb29c15aeab default }" containerID=a93ecc9b43aee7a388b37232c17abfb386cff1ca26f94b6e95dc8039a67dd83e datapathConfiguration="&{false false false false false }" interface=lxce27e1d63b0e1 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a93ecc9b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a93ecc9b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a93ecc9b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=46927 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a93ecc9b43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=46927 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a93ecc9b43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=46927 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a93ecc9b43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=46927 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 6bde08ad-8045-4c0b-b22f-1ff3c023b673 default }" containerID=28b10572044a3c37fde89766db66c735d41cf90a7c96c2cddf3f676c402eeff1 datapathConfiguration="&{false false false false false }" interface=lxc2d7081992452 k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28b1057204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28b1057204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28b1057204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28b1057204 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=16565 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=28b1057204 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=510 identity=16565 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28b1057204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=510 identity=16565 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 c1a4b1d4-688b-4b41-a386-abfe221aba9d default }" containerID=15c1646f52449c8d4d7c20cce52e8ad287fada270789dfb1f145d2482f472eda datapathConfiguration="&{false false false false false }" interface=lxcfc8e41bd09c2 k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15c1646f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15c1646f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=15c1646f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15c1646f52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=16565 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15c1646f52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=329 identity=16565 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15c1646f52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=329 identity=16565 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 subsys=daemon level=info msg="Delete endpoint request" containerID=a93ecc9b43 endpointID=439 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-tgvnp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=400ac637-2ef4-48b8-86b7-4af987fb8fc2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a93ecc9b43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=46927 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgvnp subsys=endpoint level=info msg="Delete endpoint request" containerID=28b1057204 endpointID=510 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=15c1646f52 endpointID=329 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=28b1057204 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=510 identity=16565 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9428c827-8a11-4e40-b0fc-c906a58751b2 subsys=endpoint level=info msg="Removed endpoint" containerID=15c1646f52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=329 identity=16565 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e0544c49-1772-4b3c-b56b-b79b6c9fe901 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 74b682b5-52e6-4e5d-8e65-19dd390bfcbf default }" containerID=75c49dadf5139b8a96713ce60ae51fd6e1cb2ea85fa3e686ada33361ca199f7d datapathConfiguration="&{false false false false false }" interface=lxc428db20ac383 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75c49dadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75c49dadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75c49dadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=62926 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75c49dadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=62926 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=75c49dadf5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=737 identity=62926 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75c49dadf5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=737 identity=62926 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 326d6418-c6c7-4254-ae86-1d6e16ad81af default }" containerID=fc77ad3be9c37b0e15e2550dc8ed7a995c68e58925dd52ab7d1a499ad9e927d1 datapathConfiguration="&{false false false false false }" interface=lxc721dd25a1bff k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc77ad3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc77ad3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc77ad3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identity=2381 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc77ad3be9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identity=2381 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc77ad3be9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3190 identity=2381 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc77ad3be9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3190 identity=2381 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 616a5447-5c85-4fad-8803-47ece1926e82 default }" containerID=d66e41a188caf3f9725ee59aa6228d6ab90703bc649ae0d1ad4016bfefc42a41 datapathConfiguration="&{false false false false false }" interface=lxce651109e4923 k8sPodName=monitoring/loki-gateway-cf54cb88c-ppxkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d66e41a188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-ppxkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d66e41a188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-ppxkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d66e41a188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identity=33822 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-ppxkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d66e41a188 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3908 identity=33822 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-ppxkx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 a9152f98-8aa2-42b5-8729-78c84437d17c default }" containerID=1a3356bb6c6657e629ca43c47b924922905319a482e20341624f138ec8fc9a14 datapathConfiguration="&{false false false false false }" interface=lxcda49d758b90c k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a3356bb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a3356bb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a3356bb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=3710 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a3356bb6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=3710 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d66e41a188 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3908 identity=33822 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-ppxkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=d66e41a188 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3908 identity=33822 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-ppxkx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 7c5eeeee-98dc-40be-acb0-a988bf6dbeef default }" containerID=df8664db58533bb00a92df9c82e64495d7f6cb3f1fcf61167e79f02d1397c946 datapathConfiguration="&{false false false false false }" interface=lxc7dbb71f2356a k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df8664db58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3655 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df8664db58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3655 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df8664db58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3655 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df8664db58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3655 identity=16565 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a3356bb6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1765 identity=3710 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a3356bb6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1765 identity=3710 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df8664db58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3655 identity=16565 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca subsys=endpoint level=info msg="Successful endpoint creation" containerID=df8664db58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3655 identity=16565 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 fd19f2ba-3353-4dfb-8b5b-dadc7509b271 default }" containerID=ed57303234ee4e1fb793780133f069e492a0aa3578dcefafea12a0faf15683d3 datapathConfiguration="&{false false false false false }" interface=lxc70f4625a5b7a k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed57303234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed57303234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed57303234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=52036 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed57303234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=52036 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed57303234 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=892 identity=52036 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed57303234 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=892 identity=52036 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 c1e25f07-5ca0-42c3-ac7a-ee4f3b398df7 default }" containerID=5a875d68fb7f67df569772e27c2741876d80f54680f9d8e3ed845bbcbf2e854f datapathConfiguration="&{false false false false false }" interface=lxce8d5100ccb10 k8sPodName=monitoring/vector-2nwtq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a875d68fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/vector-2nwtq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a875d68fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/vector-2nwtq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a875d68fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identity=45466 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/vector-2nwtq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a875d68fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identity=45466 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/vector-2nwtq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a875d68fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1385 identity=45466 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/vector-2nwtq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a875d68fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1385 identity=45466 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/vector-2nwtq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df8664db58 endpointID=3655 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=df8664db58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3655 identity=16565 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66ec8c7b-a2d6-40f3-9fd4-0947963865ca subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 f7a9fc7a-1131-47a2-b0f8-c555f6fe0372 default }" containerID=9d6c26dfc3542f0b3c2b7744c0cab03578afb719c6889baeaf5297ca5fd9797d datapathConfiguration="&{false false false false false }" interface=lxc4b9c3958292b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d6c26dfc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d6c26dfc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d6c26dfc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=9130 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d6c26dfc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=9130 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d6c26dfc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1649 identity=9130 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d6c26dfc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1649 identity=9130 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 4874e497-5ce9-41a5-a601-20ee22e67b0c default }" containerID=7a17cf110d9b5c41a73fb8741aae5928d3f6a978e55ce5fce3ee476d96f45ad3 datapathConfiguration="&{false false false false false }" interface=lxcf287f946b67d k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q994f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a17cf110d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q994f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a17cf110d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q994f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a17cf110d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=13392 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q994f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a17cf110d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=13392 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q994f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a17cf110d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1656 identity=13392 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q994f subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a17cf110d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1656 identity=13392 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-q994f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 3fd6a235-b3eb-4ef3-8b50-d51804a7dd9c default }" containerID=511de743ef0d415b6f6e1bd84a762218a4c8d419ce946697df73d6757610881b datapathConfiguration="&{false false false false false }" interface=lxc5266779a90a3 k8sPodName=openstack/memcached-memcached-6479589586-k7rwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=511de743ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k7rwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=511de743ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k7rwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=511de743ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=34303 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k7rwq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=511de743ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=34303 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k7rwq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=511de743ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1910 identity=34303 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k7rwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=511de743ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=34303 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k7rwq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.89 a8f9481d-ca3c-4a9a-aa93-7b3b083534be default }" containerID=706c96afe2e82aa471887d5d04ea2f6287930d0b777f032fd0e1271547e58cf2 datapathConfiguration="&{false false false false false }" interface=lxc0e8f1667074f k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=706c96afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=706c96afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=706c96afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=706c96afe2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=16565 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=706c96afe2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=504 identity=16565 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d subsys=endpoint level=info msg="Successful endpoint creation" containerID=706c96afe2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=16565 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d subsys=daemon level=info msg="Delete endpoint request" containerID=706c96afe2 endpointID=504 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=706c96afe2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=16565 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6bf3860d-8bf5-436c-b16b-bf77872a308d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 aa02505d-38cb-4878-bdc8-2f58a04ca6c0 default }" containerID=6a20f45f96dff0006de921909aa148fd0b925bcf0d4be73c464a6d58d52dd05c datapathConfiguration="&{false false false false false }" interface=lxc869a204ad1a6 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a20f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a20f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6a20f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6a20f45f96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identity=5767 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a20f45f96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2310 identity=5767 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a20f45f96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2310 identity=5767 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a20f45f96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2310 identity=5767 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 3105f0c5-3219-4a9b-b37a-8b067192ca69 default }" containerID=47e02f2c88c70b2cf9e2b9b6f4f8fba19f01db76c55d6bb2f290692f32d56078 datapathConfiguration="&{false false false false false }" interface=lxca2babdaf0f1b k8sPodName=openstack/keystone-api-7748bdf97b-dpngl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47e02f2c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-7748bdf97b-dpngl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47e02f2c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-7748bdf97b-dpngl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47e02f2c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identity=24035 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-7748bdf97b-dpngl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47e02f2c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1489 identity=24035 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-7748bdf97b-dpngl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47e02f2c88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1489 identity=24035 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-7748bdf97b-dpngl subsys=endpoint level=info msg="Successful endpoint creation" containerID=47e02f2c88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1489 identity=24035 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-7748bdf97b-dpngl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 513e66bb-e244-46cc-bee7-2484b70596a9 default }" containerID=e352f55b16cfff3491949ee35e8146ce557e1668b40f7e3b03edeb9fd03d22ed datapathConfiguration="&{false false false false false }" interface=lxc79b58fec648b k8sPodName=openstack/keystone-credential-setup-ns4nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e352f55b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-ns4nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e352f55b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-ns4nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e352f55b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=8369 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-ns4nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e352f55b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=8369 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-ns4nw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e352f55b16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1706 identity=8369 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-ns4nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e352f55b16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=8369 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-ns4nw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e352f55b16 endpointID=1706 k8sNamespace=openstack k8sPodName=keystone-credential-setup-ns4nw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=eec91f3c-bcb9-40c4-8beb-8d3063d9d8a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e352f55b16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=8369 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-ns4nw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 416f916e-6a1b-46a0-9331-e002edbc6da7 default }" containerID=8d8366018d22454e442e8748a7f22c67c6937615c6e08517105744790ed53d04 datapathConfiguration="&{false false false false false }" interface=lxcbcb9187337cb k8sPodName=openstack/keystone-db-init-kwf5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d8366018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d8366018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d8366018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d8366018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=39882 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d8366018d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=825 identity=39882 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d8366018d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=825 identity=39882 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d8366018d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=825 identity=39882 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d8366018d endpointID=825 k8sNamespace=openstack k8sPodName=keystone-db-init-kwf5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=70bc6f72-1b1d-419a-a110-ef9465b7e7c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8d8366018d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=825 identity=39882 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-kwf5m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 31a3b68f-99eb-4b9f-ab8f-da323fcec12e default }" containerID=67191148ca9e8a95af5238f274a1eca7481a387fad02fcac525640beebb078fe datapathConfiguration="&{false false false false false }" interface=lxc0a5e55a1bbba k8sPodName=openstack/keystone-fernet-setup-9dqff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67191148ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67191148ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6825339f-775a-40f3-9526-dae3315e63fe,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6825339f-775a-40f3-9526-dae3315e63fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6825339f-775a-40f3-9526-dae3315e63fe;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=6825339f-775a-40f3-9526-dae3315e63fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=67191148ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=67191148ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=51573 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6825339f-775a-40f3-9526-dae3315e63fe,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6825339f-775a-40f3-9526-dae3315e63fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67191148ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=51573 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67191148ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=265 identity=51573 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff subsys=endpoint level=info msg="Successful endpoint creation" containerID=67191148ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=265 identity=51573 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67191148ca endpointID=265 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-9dqff subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6825339f-775a-40f3-9526-dae3315e63fe k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=6825339f-775a-40f3-9526-dae3315e63fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=67191148ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=265 identity=51573 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-9dqff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 74c6a07b-d3b6-455f-a90a-bdbf0000bbaf default }" containerID=99fe6244cfb6fb81a4b6724fff9ba2648bd3158356c81d5f9de376e8e3b25a90 datapathConfiguration="&{false false false false false }" interface=lxc02b0cc6db6ba k8sPodName=openstack/keystone-db-sync-4btng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99fe6244cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-sync-4btng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99fe6244cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-sync-4btng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99fe6244cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=31677 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-sync-4btng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99fe6244cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=31677 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-sync-4btng subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=99fe6244cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=238 identity=31677 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-sync-4btng subsys=endpoint level=info msg="Successful endpoint creation" containerID=99fe6244cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=238 identity=31677 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-sync-4btng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99fe6244cf endpointID=238 k8sNamespace=openstack k8sPodName=keystone-db-sync-4btng subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=b3ab18ca-3973-4fbe-8773-3348017e9aa4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=99fe6244cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=238 identity=31677 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-sync-4btng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 93a2a2c5-4259-41b9-902f-9afe2e82839b default }" containerID=7e26299f71eb877648490efff491c080fb4494eb56c8cb87a26eae59e4910949 datapathConfiguration="&{false false false false false }" interface=lxc40886f6f1e06 k8sPodName=openstack/keystone-rabbit-init-qvwqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e26299f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-rabbit-init-qvwqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e26299f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-rabbit-init-qvwqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e26299f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=54478 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-rabbit-init-qvwqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e26299f71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=54478 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-rabbit-init-qvwqx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e26299f71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2884 identity=54478 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-rabbit-init-qvwqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e26299f71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2884 identity=54478 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-rabbit-init-qvwqx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e26299f71 endpointID=2884 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-qvwqx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d6a189ff-8471-40fc-9217-2ff8dbff0478 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7e26299f71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2884 identity=54478 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/keystone-rabbit-init-qvwqx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 36ba1a19-404b-4a11-bced-1f44b41725af default }" containerID=236088a4498af76e3f88486c4fdbc84b1ab5f0893e0c0a2c448f89a18c8d224c datapathConfiguration="&{false false false false false }" interface=lxc20b1af6b929a k8sPodName=openstack/keystone-domain-manage-4kwq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=236088a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4028 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-4kwq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=236088a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4028 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-4kwq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=236088a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4028 identity=14263 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-4kwq9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=236088a449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4028 identity=14263 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-4kwq9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=236088a449 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4028 identity=14263 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-4kwq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=236088a449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4028 identity=14263 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-4kwq9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=236088a449 endpointID=4028 k8sNamespace=openstack k8sPodName=keystone-domain-manage-4kwq9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=dd7b82c5-1dad-47fd-aa9b-3afa36b7b913 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=236088a449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4028 identity=14263 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-domain-manage-4kwq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 9fb8799b-1cdb-4372-be90-7ff4cc0b87ad default }" containerID=58a43c1861cf9b3421aa7ce40ffce828f3f0914413045268fae6e64338541f8d datapathConfiguration="&{false false false false false }" interface=lxc566796272c33 k8sPodName=openstack/keystone-bootstrap-g59dk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58a43c1861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-bootstrap-g59dk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58a43c1861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fd81731a-535d-4401-8c14-165278f578ab,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fd81731a-535d-4401-8c14-165278f578ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-bootstrap-g59dk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fd81731a-535d-4401-8c14-165278f578ab;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=fd81731a-535d-4401-8c14-165278f578ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58a43c1861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=20502 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fd81731a-535d-4401-8c14-165278f578ab,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=fd81731a-535d-4401-8c14-165278f578ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-bootstrap-g59dk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=58a43c1861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2386 identity=20502 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-bootstrap-g59dk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58a43c1861 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2386 identity=20502 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-bootstrap-g59dk subsys=endpoint level=info msg="Successful endpoint creation" containerID=58a43c1861 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=20502 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-bootstrap-g59dk subsys=daemon level=info msg="Delete endpoint request" containerID=58a43c1861 endpointID=2386 k8sNamespace=openstack k8sPodName=keystone-bootstrap-g59dk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fd81731a-535d-4401-8c14-165278f578ab k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=fd81731a-535d-4401-8c14-165278f578ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=58a43c1861 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2386 identity=20502 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-bootstrap-g59dk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 7f4dbf8e-72ed-48f3-a7e8-910899980c4a default }" containerID=e37eca1a31ca8269f23244fd5e3227552f2a939655535a3bf678804f32176fde datapathConfiguration="&{false false false false false }" interface=lxcd94d21349ad4 k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e37eca1a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e37eca1a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e37eca1a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e37eca1a31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2526 identity=16565 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e37eca1a31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2526 identity=16565 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e37eca1a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2526 identity=16565 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 subsys=daemon level=info msg="Delete endpoint request" containerID=e37eca1a31 endpointID=2526 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e37eca1a31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2526 identity=16565 ipv4=10.0.0.186 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dab030f0-77c4-4f49-8de8-4c4e737ea480 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 f1e99b79-b094-4cca-b739-dbc881e3e29f default }" containerID=2c59d4b66ceb42b765a58d231a436099cebb0e9143bc52b3c5bcec2900b5efe5 datapathConfiguration="&{false false false false false }" interface=lxc0661654737da k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c59d4b66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c59d4b66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2c59d4b66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c59d4b66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=19677 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c59d4b66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=19677 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c59d4b66c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=179 identity=19677 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c59d4b66c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=179 identity=19677 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 e7a19a9b-b083-4aef-92fe-531ca4ae0859 default }" containerID=a97306822fe6fa71932040dcb39dc6b051a97f8f013f80f63fd998f2c505a368 datapathConfiguration="&{false false false false false }" interface=lxcb3223d321806 k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a97306822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a97306822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a97306822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a97306822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=52160 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a97306822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=52160 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 82981c27-23d4-4506-a8ea-1c674254f458 default }" containerID=31039283bfad9d2217407b91314acbcfd52da136bf4a7a0e96fe9bfe5ad4d918 datapathConfiguration="&{false false false false false }" interface=lxc1b871ce4d0fb k8sPodName=openstack/barbican-db-init-c8lmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31039283bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-c8lmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31039283bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-c8lmp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31039283bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=25906 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-c8lmp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31039283bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=25906 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-c8lmp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a97306822f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1465 identity=52160 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a97306822f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=52160 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-api-59b898f9c4-q6jnr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=31039283bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3980 identity=25906 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-c8lmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=31039283bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3980 identity=25906 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-c8lmp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31039283bf endpointID=3980 k8sNamespace=openstack k8sPodName=barbican-db-init-c8lmp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=1d1b2f94-3852-46fd-8c33-daaf9bb51b7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=31039283bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3980 identity=25906 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/barbican-db-init-c8lmp subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036180962300647934 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.17 894e0aeb-d896-4839-8bf2-d225be9dba74 default }" containerID=2bae01bbbb8f522c9c6da0f5d4b8c3908fc7343546c70fb0e9fc2d764c5c4f32 datapathConfiguration="&{false false false false false }" interface=lxcd39cfd21c547 k8sPodName=openstack/barbican-db-sync-77qd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bae01bbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-sync-77qd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bae01bbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-sync-77qd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bae01bbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=11056 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-sync-77qd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bae01bbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=11056 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-sync-77qd4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2bae01bbbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3489 identity=11056 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-sync-77qd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bae01bbbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3489 identity=11056 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-sync-77qd4 subsys=daemon level=info msg="Delete endpoint request" containerID=2bae01bbbb endpointID=3489 k8sNamespace=openstack k8sPodName=barbican-db-sync-77qd4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b1ab7e27-e099-42ca-bd48-749e4dd08961 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2bae01bbbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3489 identity=11056 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/barbican-db-sync-77qd4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 bd4bb77d-8460-4826-ac3d-1d2a72c47f29 default }" containerID=6a30d4d1e165e8b96739727ad204a6afd03560c03c7abd52efe3369f66941e28 datapathConfiguration="&{false false false false false }" interface=lxc14f6b9dfb7ac k8sPodName=openstack/barbican-rabbit-init-czvm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a30d4d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-rabbit-init-czvm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a30d4d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-rabbit-init-czvm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6a30d4d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=5886 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-rabbit-init-czvm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a30d4d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=5886 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-rabbit-init-czvm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a30d4d1e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=742 identity=5886 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-rabbit-init-czvm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a30d4d1e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=742 identity=5886 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-rabbit-init-czvm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a30d4d1e1 endpointID=742 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-czvm2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b6242edf-e607-4955-a9c7-e51401c77cfd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6a30d4d1e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=742 identity=5886 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/barbican-rabbit-init-czvm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 61c551ad-96f5-4d4e-a3cc-f9cb47f5031d default }" containerID=3833452513f948176f6106660ddf88f82df8655247effedd880a97ea8ff8fec4 datapathConfiguration="&{false false false false false }" interface=lxc51b685c6706c k8sPodName=openstack/barbican-ks-service-7spft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3833452513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-ks-service-7spft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3833452513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-ks-service-7spft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3833452513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=9111 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-ks-service-7spft oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3833452513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=9111 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-ks-service-7spft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3833452513 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=145 identity=9111 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-ks-service-7spft subsys=endpoint level=info msg="Successful endpoint creation" containerID=3833452513 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=145 identity=9111 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-ks-service-7spft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3833452513 endpointID=145 k8sNamespace=openstack k8sPodName=barbican-ks-service-7spft subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=6342f74b-e9ca-41fa-a70e-7613159427e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3833452513 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=145 identity=9111 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-ks-service-7spft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 6b0c61b1-53d5-4caf-9c8d-a8eceb017b8b default }" containerID=d6d887cddb99598b815ba905860244f691c1a591169395254d351a1c68c432ee datapathConfiguration="&{false false false false false }" interface=lxc84f812dbad57 k8sPodName=openstack/barbican-ks-endpoints-6f6r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6d887cddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6f6r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6d887cddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6f6r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6d887cddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=3941 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6f6r9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d6d887cddb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=3941 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6f6r9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6d887cddb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3466 identity=3941 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6f6r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6d887cddb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3466 identity=3941 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6f6r9 subsys=daemon level=info msg="Delete endpoint request" containerID=d6d887cddb endpointID=3466 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6f6r9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=39056c7a-51d8-492b-b336-c60cd398e2b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d6d887cddb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3466 identity=3941 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6f6r9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 5dc830af-99f9-46f8-b9d8-9174a46b62e8 default }" containerID=71e243cc844c51525022b9f240207ba97854d72b341e442145bf19fcf672b43d datapathConfiguration="&{false false false false false }" interface=lxc53735077a6f8 k8sPodName=openstack/barbican-ks-user-jxdc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71e243cc84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-jxdc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71e243cc84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-jxdc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=71e243cc84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=4017 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-jxdc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71e243cc84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=4017 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-jxdc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71e243cc84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=4017 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-jxdc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71e243cc84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=4017 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-jxdc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71e243cc84 endpointID=537 k8sNamespace=openstack k8sPodName=barbican-ks-user-jxdc2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=11b93e74-a634-4e30-b5e1-1584549fb9ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=71e243cc84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=4017 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-jxdc2 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.219 4e749250-fb74-47cb-966b-6864292cad80 default }" containerID=92927b14697df03e7b60d25d51a7f9dbd65d39d9460df92b41613202b7a9bc41 datapathConfiguration="&{false false false false false }" interface=lxce8cbd5ae9538 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-vlvq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92927b1469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-vlvq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92927b1469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-vlvq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92927b1469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=44637 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-vlvq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92927b1469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=44637 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-vlvq7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92927b1469 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3181 identity=44637 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-vlvq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92927b1469 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3181 identity=44637 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-vlvq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 8b96d3c4-4510-42c9-af35-dc5446110b30 default }" containerID=d54ab5f23710c24b3965aa1abb79fe81e53e6b425557e0230a769a66e8e60ce0 datapathConfiguration="&{false false false false false }" interface=lxc58480e3e1112 k8sPodName=openstack/rook-ceph-detect-version-7wp9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d54ab5f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7wp9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d54ab5f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7wp9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d54ab5f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=7769 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7wp9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d54ab5f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=7769 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7wp9h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d54ab5f237 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=694 identity=7769 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7wp9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=d54ab5f237 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=694 identity=7769 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7wp9h subsys=daemon level=info msg="Delete endpoint request" containerID=d54ab5f237 endpointID=694 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-7wp9h subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=eb8c6e8f-bc3a-4cf7-8267-ff2e42e43da3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=d54ab5f237 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=694 identity=7769 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7wp9h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 ce3b9e27-c479-4c27-b1e5-0f26b16c2ac1 default }" containerID=4d604e6d43073ead1b313f1f0b5cbf7c86361bdf00aaafe75018020c8697bfb6 datapathConfiguration="&{false false false false false }" interface=lxcda083228a910 k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d604e6d43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d604e6d43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d604e6d43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=1278 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d604e6d43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=1278 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d604e6d43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1389 identity=1278 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d604e6d43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=1278 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d604e6d43 endpointID=1389 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mfdlh subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0f1f6cd4-e51e-4fe8-b34c-f3f39da76d7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=4d604e6d43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=1278 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mfdlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 9d014140-2b47-40e1-8063-fbe7d11d2ebf default }" containerID=54957171af2e6e822ceee39a4b29bff34560723c5a5d68d849664792a91b11ea datapathConfiguration="&{false false false false false }" interface=lxce585072aa01c k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54957171af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54957171af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54957171af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=16565 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54957171af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=16565 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54957171af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=686 identity=16565 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54957171af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=686 identity=16565 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 subsys=daemon level=info msg="Delete endpoint request" containerID=54957171af endpointID=686 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=54957171af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=686 identity=16565 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1c5dd65-d696-4046-8bc4-c071b9fab352 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 c2168e1f-3bbb-451c-8dbb-67ee85080595 default }" containerID=a67831d2da2edfcf4a9391930b15c2a5c1cff2127d40d78ba35a1a4d47f2d29f datapathConfiguration="&{false false false false false }" interface=lxcf43d1cadf43d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a67831d2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a67831d2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a67831d2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a67831d2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 identity=45113 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a67831d2da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3657 identity=45113 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a67831d2da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3657 identity=45113 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a67831d2da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3657 identity=45113 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 d248feb9-1b3b-402c-ad93-41f7fa4d08fd default }" containerID=89c0c23876d8fcbbfb654d9bfd7a1b213262ba0e6172073550ad0f6ab3fb469d datapathConfiguration="&{false false false false false }" interface=lxc1370885d594e k8sPodName=openstack/glance-db-init-s94th labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89c0c23876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-init-s94th subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89c0c23876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-init-s94th subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89c0c23876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=14423 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-init-s94th oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89c0c23876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=14423 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-init-s94th subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=89c0c23876 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=708 identity=14423 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-init-s94th subsys=endpoint level=info msg="Successful endpoint creation" containerID=89c0c23876 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=708 identity=14423 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-init-s94th subsys=daemon level=info msg="Delete endpoint request" containerID=89c0c23876 endpointID=708 k8sNamespace=openstack k8sPodName=glance-db-init-s94th subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=8afe3a33-0f3b-4c06-beb7-1d8a28c35086 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=89c0c23876 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=708 identity=14423 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-db-init-s94th subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 1a0db793-799a-45e9-a94e-84ae07612838 default }" containerID=67d26cf69100a26d59318164c6cf1e404aa1ed45a248a24eac8ba6efcb87c17b datapathConfiguration="&{false false false false false }" interface=lxcbc7e7c6b1dfc k8sPodName=openstack/glance-db-sync-68kzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67d26cf691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-sync-68kzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67d26cf691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-sync-68kzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67d26cf691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=35012 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-sync-68kzv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=67d26cf691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=35012 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-sync-68kzv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67d26cf691 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=611 identity=35012 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-sync-68kzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=67d26cf691 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=611 identity=35012 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-sync-68kzv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67d26cf691 endpointID=611 k8sNamespace=openstack k8sPodName=glance-db-sync-68kzv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=b8055767-4e0e-407b-b253-a8b619fe45b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=67d26cf691 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=611 identity=35012 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-sync-68kzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 47cc107d-07ae-4b52-b4a6-f17ac0a4fe3a default }" containerID=5b1071aedca4495ac197000f673ee33c4426cbfe2343a81aea5eea45a648cdea datapathConfiguration="&{false false false false false }" interface=lxcaa70a359982d k8sPodName=openstack/glance-rabbit-init-s6457 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b1071aedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-rabbit-init-s6457 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b1071aedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-rabbit-init-s6457 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b1071aedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=27368 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-rabbit-init-s6457 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b1071aedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=27368 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-rabbit-init-s6457 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5b1071aedc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1920 identity=27368 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-rabbit-init-s6457 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b1071aedc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1920 identity=27368 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-rabbit-init-s6457 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.51 0ede2081-7206-40e4-9e51-9f265231b901 default }" containerID=401fb59d8242a39824c0225cff038f7563aac5ed0426e84db58fb9b20bd10ed1 datapathConfiguration="&{false false false false false }" interface=lxc1beddfec9810 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nkqxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=401fb59d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nkqxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=401fb59d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nkqxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=401fb59d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identity=52637 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nkqxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=401fb59d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identity=52637 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nkqxb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 5d2f6932-aeff-4948-ac53-c6ed4bf5815e default }" containerID=d4aadde0e4ae54c3bc88a154e618baa199eeff185ffe7c53d5f159fa6a2e7d2a datapathConfiguration="&{false false false false false }" interface=lxc5bf12a4777cf k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2hr7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4aadde0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2hr7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4aadde0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2hr7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4aadde0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=3063 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2hr7v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4aadde0e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=3063 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2hr7v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=401fb59d82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3997 identity=52637 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nkqxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=401fb59d82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3997 identity=52637 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nkqxb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d4aadde0e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=3063 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2hr7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4aadde0e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=3063 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2hr7v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b1071aedc endpointID=1920 k8sNamespace=openstack k8sPodName=glance-rabbit-init-s6457 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b1fd5758-f0e1-4f0c-a6ad-cffa4e986b5c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5b1071aedc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1920 identity=27368 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-rabbit-init-s6457 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 ac108a4f-dd08-4caa-8f81-68b86625e03d default }" containerID=f7c8d2f5b26574c070c640a8ea50e66ab6840feb2102f316f70eb6a04e302892 datapathConfiguration="&{false false false false false }" interface=lxc6d54b1eb6783 k8sPodName=openstack/glance-ks-service-8t7rm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7c8d2f5b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-service-8t7rm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7c8d2f5b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3b02836f-21e8-4873-9d81-9d4042297533,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3b02836f-21e8-4873-9d81-9d4042297533,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-service-8t7rm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3b02836f-21e8-4873-9d81-9d4042297533;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=3b02836f-21e8-4873-9d81-9d4042297533;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7c8d2f5b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=5179 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3b02836f-21e8-4873-9d81-9d4042297533,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3b02836f-21e8-4873-9d81-9d4042297533,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-service-8t7rm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7c8d2f5b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=5179 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-service-8t7rm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f7c8d2f5b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=209 identity=5179 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-service-8t7rm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7c8d2f5b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=209 identity=5179 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-service-8t7rm subsys=daemon level=info msg="Delete endpoint request" containerID=f7c8d2f5b2 endpointID=209 k8sNamespace=openstack k8sPodName=glance-ks-service-8t7rm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3b02836f-21e8-4873-9d81-9d4042297533 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=3b02836f-21e8-4873-9d81-9d4042297533 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f7c8d2f5b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=209 identity=5179 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-service-8t7rm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 dc757d7a-f4ed-4b6c-b03c-1dbee3e2e215 default }" containerID=badbd099ffb9971c668d8befc6811a3b7b2f54dcc38a0c3659e38c2497dd13d2 datapathConfiguration="&{false false false false false }" interface=lxc23a0e3e1a7fa k8sPodName=openstack/glance-ks-endpoints-g9qks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=badbd099ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-endpoints-g9qks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=badbd099ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-endpoints-g9qks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=badbd099ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 identity=14992 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-endpoints-g9qks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=badbd099ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1963 identity=14992 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-endpoints-g9qks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=badbd099ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1963 identity=14992 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-endpoints-g9qks subsys=endpoint level=info msg="Successful endpoint creation" containerID=badbd099ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1963 identity=14992 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-endpoints-g9qks subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 484feaab-9f36-4a8f-a0ad-ae5afe2644d8 default }" containerID=5a64751ae2367d194965c07d86263434fc89802a247fac8f864fd6d39b7cb64f datapathConfiguration="&{false false false false false }" interface=lxc81701bb8fa06 k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a64751ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a64751ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a64751ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identity=12302 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5a64751ae2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identity=12302 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a64751ae2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1130 identity=12302 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a64751ae2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1130 identity=12302 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx subsys=daemon level=info msg="Delete endpoint request" containerID=5a64751ae2 endpointID=1130 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-sbnkx subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=ee39bc80-e9f1-486d-94af-38ae1b5fa138 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=5a64751ae2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1130 identity=12302 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-sbnkx subsys=endpoint level=info msg="Delete endpoint request" containerID=badbd099ff endpointID=1963 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-g9qks subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=83737f60-6e8e-46aa-8148-abadd00c1363 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=badbd099ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1963 identity=14992 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/glance-ks-endpoints-g9qks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 38d74072-1f35-47a4-9974-4afc9cd10826 default }" containerID=afb05a0ed66972ee3c928dd4c87fc22c9227b8db91349234985710e9ac0d1baf datapathConfiguration="&{false false false false false }" interface=lxce4a1c08227d3 k8sPodName=openstack/glance-ks-user-ttmg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afb05a0ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-ks-user-ttmg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afb05a0ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-ks-user-ttmg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afb05a0ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=28749 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-ks-user-ttmg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afb05a0ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=28749 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-ks-user-ttmg5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=afb05a0ed6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1699 identity=28749 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-ks-user-ttmg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=afb05a0ed6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1699 identity=28749 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-ks-user-ttmg5 subsys=daemon level=info msg="Delete endpoint request" containerID=afb05a0ed6 endpointID=1699 k8sNamespace=openstack k8sPodName=glance-ks-user-ttmg5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=5f61ae63-bae3-4941-9729-f6ed674fb17c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=afb05a0ed6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1699 identity=28749 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-ks-user-ttmg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 cc2d9492-0197-4706-86ad-02cde7c21663 default }" containerID=ea43e5b284d9d8bac396bafb8278c52a20440e3fd2f513a0779c7dfb11304d53 datapathConfiguration="&{false false false false false }" interface=lxcd9652e238474 k8sPodName=openstack/glance-metadefs-load-cwr9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea43e5b284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-metadefs-load-cwr9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea43e5b284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-metadefs-load-cwr9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea43e5b284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 identity=55999 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-metadefs-load-cwr9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea43e5b284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 identity=55999 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-metadefs-load-cwr9x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea43e5b284 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=806 identity=55999 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-metadefs-load-cwr9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea43e5b284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=806 identity=55999 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-metadefs-load-cwr9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea43e5b284 endpointID=806 k8sNamespace=openstack k8sPodName=glance-metadefs-load-cwr9x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7bc0df50-27fa-4ae1-8889-571d3ecb6b16 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ea43e5b284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=806 identity=55999 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-metadefs-load-cwr9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 afb19329-a799-41a2-8b12-92ab161758b8 default }" containerID=0f198d1f73ed726be8486f0d3f9883e858bfce9e234db32bd80f107d177bd2f8 datapathConfiguration="&{false false false false false }" interface=lxc94c8a6f57a6f k8sPodName=openstack/glance-storage-init-jflzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f198d1f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-jflzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f198d1f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-jflzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0f198d1f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=8023 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-jflzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f198d1f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=8023 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-jflzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f198d1f73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=601 identity=8023 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-jflzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f198d1f73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=601 identity=8023 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-jflzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f198d1f73 endpointID=601 k8sNamespace=openstack k8sPodName=glance-storage-init-jflzl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=ab30a35f-84f2-480a-91a2-edc8efb56def k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0f198d1f73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=601 identity=8023 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-storage-init-jflzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 779f0f56-d2c7-4403-a52a-f945474163a3 default }" containerID=4f137b787fd53a28c4b3d38312cfbd882af3b8244cfd67baf8597bd51f7769cc datapathConfiguration="&{false false false false false }" interface=lxcfaa5c6e7498e k8sPodName=openstack/glance-api-7c66468ddf-hhcph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f137b787f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-api-7c66468ddf-hhcph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f137b787f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-api-7c66468ddf-hhcph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f137b787f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-api-7c66468ddf-hhcph line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f137b787f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identity=48723 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-api-7c66468ddf-hhcph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f137b787f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identity=48723 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-api-7c66468ddf-hhcph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f137b787f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4005 identity=48723 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-api-7c66468ddf-hhcph subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f137b787f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4005 identity=48723 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-api-7c66468ddf-hhcph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.215 545ba9ec-4c3c-4b92-93a9-f5195ede92c5 default }" containerID=137778403261206efb3724acc484b5a3d68bbe9efb78ce8531959768641d996e datapathConfiguration="&{false false false false false }" interface=lxc53f83566ef44 k8sPodName=openstack/staffeln-conductor-7cf65767dc-jj8ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1377784032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/staffeln-conductor-7cf65767dc-jj8ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1377784032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/staffeln-conductor-7cf65767dc-jj8ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1377784032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=59588 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/staffeln-conductor-7cf65767dc-jj8ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1377784032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2348 identity=59588 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/staffeln-conductor-7cf65767dc-jj8ks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 c0429147-9bf0-40a1-aafc-f4ee6f9f9855 default }" containerID=fa14b16f1ffcf71145128b6aa9fd4136620af46ddfcc657554c3f346ca8c8438 datapathConfiguration="&{false false false false false }" interface=lxcebf11be6b5a2 k8sPodName=openstack/staffeln-api-7ccd6cd6bd-d9bzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa14b16f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-api-7ccd6cd6bd-d9bzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa14b16f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-api-7ccd6cd6bd-d9bzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa14b16f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=3551 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-api-7ccd6cd6bd-d9bzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa14b16f1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=353 identity=3551 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-api-7ccd6cd6bd-d9bzz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1377784032 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2348 identity=59588 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/staffeln-conductor-7cf65767dc-jj8ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=1377784032 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2348 identity=59588 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/staffeln-conductor-7cf65767dc-jj8ks subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 f83ff92b-beb7-4bdd-91d7-df02c475ed5b default }" containerID=f43a2daa59a973bf4aaca6e281f96dd3924436d0b462d991b5492f0da3c72e1f datapathConfiguration="&{false false false false false }" interface=lxce8b683bf8c73 k8sPodName=openstack/staffeln-db-init-fd9mp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f43a2daa59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-fd9mp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f43a2daa59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-fd9mp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f43a2daa59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 identity=1112 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-fd9mp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f43a2daa59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=791 identity=1112 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-fd9mp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa14b16f1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=353 identity=3551 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-api-7ccd6cd6bd-d9bzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa14b16f1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=353 identity=3551 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/staffeln-api-7ccd6cd6bd-d9bzz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f43a2daa59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=791 identity=1112 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-fd9mp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f43a2daa59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=791 identity=1112 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-fd9mp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f43a2daa59 endpointID=791 k8sNamespace=openstack k8sPodName=staffeln-db-init-fd9mp subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5a9ae265-37d1-4dfb-bdd6-6a437bcc9bc6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=f43a2daa59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=791 identity=1112 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-init-fd9mp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 15f99e0a-7c35-420c-9e21-f862bbaa25c6 default }" containerID=5d10d2929095dd1b7266ab3364435aba9930f16f7953a0c9b1d370ebe77571db datapathConfiguration="&{false false false false false }" interface=lxc3cb4ccc83c4b k8sPodName=openstack/staffeln-db-sync-7cdqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d10d29290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-7cdqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d10d29290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c91eb7e4-1f10-4f23-b208-3061b3ecccf2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c91eb7e4-1f10-4f23-b208-3061b3ecccf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-7cdqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c91eb7e4-1f10-4f23-b208-3061b3ecccf2;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c91eb7e4-1f10-4f23-b208-3061b3ecccf2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d10d29290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=5061 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c91eb7e4-1f10-4f23-b208-3061b3ecccf2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c91eb7e4-1f10-4f23-b208-3061b3ecccf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-7cdqs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d10d29290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2608 identity=5061 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-7cdqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d10d29290 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2608 identity=5061 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-7cdqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d10d29290 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2608 identity=5061 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-sync-7cdqs subsys=daemon