level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="733.542µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.802µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="833.295µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.29µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=112.504812ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.87µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.33µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="71.783µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="50.942µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="59.992µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="357.372µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.35µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.560759ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.164758ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="94.862µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="95.422µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="409.013µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="222.816µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="130.523µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.223673ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="66.682µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="6.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.128.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.810978ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="22.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.192689ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.436368ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.581µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="43.521µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.161µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="55.471µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="382.312µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="20.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.11µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="232.857µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="568.537µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.332261ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.98µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="40.711µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.128 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.128 ipAddr.ipv6="" k8sNodeIP=162.253.55.128 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.128" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.133" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.128" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.128} {CiliumInternalIP 10.0.0.133}] 10.0.0.0/24 [] [] 10.0.0.145 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33685" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.51770532s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.25µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.59µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="91.182µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="6.951µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3103 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3103 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3103 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.589470047s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=337.535985ms file-path=/var/run/cilium/state/templates/e0275c2b03bc0367e8f0d09fedb28d2e655bc34ca10fb99ad82d31ced7b07215/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3103 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 ipv4=10.0.0.145 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identityLabels="reserved:health" ipv4=10.0.0.145 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identity=4 identityLabels="reserved:health" ipv4=10.0.0.145 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 83bddf73-b169-414d-b424-bd9148989e24 default }" containerID=aedcb10072d8ef83ff2bb470e5efaf9233e98fe3e15dc56da8230036f23efecd datapathConfiguration="&{false false false false false }" interface=lxc911061b858b9 k8sPodName=kube-system/coredns-7c96b6546b-p777h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aedcb10072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aedcb10072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aedcb10072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aedcb10072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=54876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aedcb10072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=54876 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 15630552-1e0e-4644-a03b-8c3915404812 default }" containerID=7c4002f890db62d88dcc9f4cbbfe1b45536b77bbef0e89d4ea3373f4eb46399f datapathConfiguration="&{false false false false false }" interface=lxc4ec904013d18 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c4002f890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 ipv4=10.0.0.87 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c4002f890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.87 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c4002f890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=39433 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.87 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c4002f890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=39433 ipv4=10.0.0.87 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.149034151s file-path=/var/run/cilium/state/templates/89e8f2afefaad16af30c0900941f4415f6c9b0685304035f1b306c35d3119cf2/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=7c4002f890 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=916 identity=39433 ipv4=10.0.0.87 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c4002f890 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=916 identity=39433 ipv4=10.0.0.87 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aedcb10072 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2693 identity=54876 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h subsys=endpoint level=info msg="Successful endpoint creation" containerID=aedcb10072 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2693 identity=54876 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1880 identity=4 ipv4=10.0.0.145 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c4002f890 endpointID=916 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-c4h7m subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=d702697c-b3a7-4f70-9537-ff50cc321e0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=7c4002f890 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=916 identity=39433 ipv4=10.0.0.87 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c4h7m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 6aa10b13-79f8-474d-aa2a-10682abecd10 default }" containerID=2caf0e8e4c9a3d90e8b93b728ac86dfa51e2d494e4575aeddcb7de40849ea61d datapathConfiguration="&{false false false false false }" interface=lxc830d15202af3 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kvjzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2caf0e8e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kvjzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2caf0e8e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kvjzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2caf0e8e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=49104 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kvjzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2caf0e8e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3759 identity=49104 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kvjzc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2caf0e8e4c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3759 identity=49104 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kvjzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2caf0e8e4c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3759 identity=49104 ipv4=10.0.0.237 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kvjzc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3103 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03103 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03103 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03103 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03103:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3103 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 610e3124-1c83-4f0b-8832-f42832bfaa41 default }" containerID=6723a2bdbcd7d9a0dbafe9c238b76fcbea19053dc32eb18ef3dfc7baa5859ee6 datapathConfiguration="&{false false false false false }" interface=lxc0e0e5587a3e9 k8sPodName=kube-system/coredns-67659f764b-hb84m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6723a2bdbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-hb84m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6723a2bdbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-hb84m subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6723a2bdbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=54876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-hb84m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6723a2bdbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=54876 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-hb84m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6723a2bdbc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2269 identity=54876 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-hb84m subsys=endpoint level=info msg="Successful endpoint creation" containerID=6723a2bdbc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2269 identity=54876 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-hb84m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 f79ba546-1c19-4f69-a389-2e2e7f270468 default }" containerID=d2ed67bdde3c251f36ee45458edff467bf1367f9aa0a9623a7b8756c509f564c datapathConfiguration="&{false false false false false }" interface=lxc113b8edf1c14 k8sPodName=kube-system/coredns-67659f764b-q7vbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2ed67bdde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-q7vbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2ed67bdde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-q7vbg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d2ed67bdde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=54876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-q7vbg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2ed67bdde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=54876 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-q7vbg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2ed67bdde datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1229 identity=54876 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-q7vbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2ed67bdde datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1229 identity=54876 ipv4=10.0.0.114 ipv6= k8sPodName=kube-system/coredns-67659f764b-q7vbg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 45ba1cb8-b180-409f-b3ce-61e53af188e0 default }" containerID=0be3ec85305e2d551d5395531cb6ef77d192da313b9f192e3658a6eceaad9ab7 datapathConfiguration="&{false false false false false }" interface=lxc53062448d792 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0be3ec8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0be3ec8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0be3ec8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0be3ec8530 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identity=10721 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0be3ec8530 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3471 identity=10721 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0be3ec8530 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3471 identity=10721 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=0be3ec8530 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3471 identity=10721 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wbx6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aedcb10072 endpointID=2693 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-p777h subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=aedcb10072 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2693 identity=54876 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-p777h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 f74d6a04-744c-48ca-b24e-74527bf67c77 default }" containerID=c7de9b89fd05d168a9b6914437143dfb15be7eb0c484ee88227a8fed1907b3fd datapathConfiguration="&{false false false false false }" interface=lxc3b05792f69e4 k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7de9b89fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7de9b89fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7de9b89fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7de9b89fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 identity=4758 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7de9b89fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1555 identity=4758 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 3a5bce89-73bd-44c8-bf92-6b2af4b8179f default }" containerID=50bfaf918921ebd74bcf8b6ec3012b3477e46f8c519e5b89122826fe629948aa datapathConfiguration="&{false false false false false }" interface=lxc7abce2b9bdbd k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g25cm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50bfaf9189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 ipv4=10.0.0.206 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g25cm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50bfaf9189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.206 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g25cm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.4 d49c4d18-0174-4f2c-9e1e-3aa09e61dadf default }" containerID=e08d077f02c2a81e6891bb50a1e0e2d4ba2dba024a808693637bd3b9dde2fad4 datapathConfiguration="&{false false false false false }" interface=lxc05221614206e k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gpq5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e08d077f02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gpq5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e08d077f02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gpq5c subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50bfaf9189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=30895 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.206 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g25cm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50bfaf9189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3293 identity=30895 ipv4=10.0.0.206 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g25cm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e08d077f02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=15694 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gpq5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e08d077f02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=15694 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gpq5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7de9b89fd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1555 identity=4758 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7de9b89fd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1555 identity=4758 ipv4=10.0.0.25 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nv47f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50bfaf9189 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3293 identity=30895 ipv4=10.0.0.206 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g25cm subsys=endpoint level=info msg="Successful endpoint creation" containerID=50bfaf9189 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3293 identity=30895 ipv4=10.0.0.206 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-g25cm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e08d077f02 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2548 identity=15694 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gpq5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e08d077f02 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2548 identity=15694 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gpq5c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.105 089f1d11-00c7-43de-a082-75db38b7f6b5 default }" containerID=e5f1ae1d07cc1242f4c47abe960cd1431910a50284ddf7d15241342ba98918ff datapathConfiguration="&{false false false false false }" interface=lxc446aeb19ad1f k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5f1ae1d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5f1ae1d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5f1ae1d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=9914 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5f1ae1d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=9914 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5f1ae1d07 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=279 identity=9914 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5f1ae1d07 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=279 identity=9914 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5f1ae1d07 endpointID=279 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-pl8rn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=fa643468-c572-4ad0-881f-1f4de6595cb0 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=e5f1ae1d07 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=279 identity=9914 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pl8rn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 4c96d1da-bd07-46b8-a47e-3b339491045a default }" containerID=92cb939219292e104cb440e16d343725d5dc42f4cd3599f1579eaa5ab9820a5c datapathConfiguration="&{false false false false false }" interface=lxcf08db5d11590 k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92cb939219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92cb939219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=92cb939219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92cb939219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=36629 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92cb939219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=36629 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92cb939219 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=432 identity=36629 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=92cb939219 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=432 identity=36629 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=92cb939219 endpointID=432 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-tjwkp subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=32173cb1-12d4-4ff1-a87b-a57921c0cea6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=92cb939219 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=432 identity=36629 ipv4=10.0.0.51 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tjwkp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 8b9a5807-d408-4e58-bd56-7a1960df5408 default }" containerID=f469a6ec952ade0d40a7942b5f2f24c787b2255ce3b463e08bd5521bacd913d2 datapathConfiguration="&{false false false false false }" interface=lxcb175ecd1e289 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f469a6ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f469a6ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f469a6ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f469a6ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=41785 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f469a6ec95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=36 identity=41785 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f469a6ec95 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=36 identity=41785 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f469a6ec95 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=36 identity=41785 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ch5zp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 469e3c13-7061-4b8f-beb4-bb2ca5e2bc5c default }" containerID=8bb05c11a703593a5c623e0ffec0cea89d491dc96dce9945853576ebac1987bf datapathConfiguration="&{false false false false false }" interface=lxc855a4c6faacc k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bb05c11a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bb05c11a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bb05c11a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=16138 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bb05c11a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=16138 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bb05c11a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=892 identity=16138 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bb05c11a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=892 identity=16138 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8bb05c11a7 endpointID=892 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-swpj4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=e4c4ffa3-e81d-4968-a121-19701b05e23c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=8bb05c11a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=892 identity=16138 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-swpj4 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=43318620-4820-4d11-86a3-ff7637f13861] Description:}]" policyAddRequest=568a8392-5ce7-4a78-a0ce-ba2bfcda144f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=568a8392-5ce7-4a78-a0ce-ba2bfcda144f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7cb5c2ae-8d17-4d34-9773-e52b2257e783] Description:}]" policyAddRequest=47a46e75-0c88-4616-a38b-36f5f1618f7d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=47a46e75-0c88-4616-a38b-36f5f1618f7d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.101 8a24712e-f871-44b1-ab75-fbcbbd608cbf default }" containerID=4e898ec23402e743c2387c549ffcc898e8b5c20876c0be0f368bc96ac9875c1e datapathConfiguration="&{false false false false false }" interface=lxc1f7d2259f739 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vvk8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e898ec234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vvk8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e898ec234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vvk8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e898ec234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=5758 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vvk8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e898ec234 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=5758 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vvk8m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e898ec234 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3590 identity=5758 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vvk8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e898ec234 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3590 identity=5758 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vvk8m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 4af2a263-0a70-4384-83c6-164036b84c94 default }" containerID=4ff5bd24f05571f4edb2b9456a65ebdbd37fdfb52a8874cf37d1efb99b3cabb5 datapathConfiguration="&{false false false false false }" interface=lxc34c143c78c8d k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j629w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ff5bd24f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j629w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ff5bd24f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j629w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ff5bd24f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=4649 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j629w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ff5bd24f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=4649 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j629w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ff5bd24f0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=880 identity=4649 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j629w subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ff5bd24f0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=880 identity=4649 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j629w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.120 7107af81-5707-4229-b218-81c23859ea96 default }" containerID=b85ebeb94819ddea01e6503b0135f6761a2b14504d40319d9368889c4699a681 datapathConfiguration="&{false false false false false }" interface=lxc2892839a533c k8sPodName=openstack/pxc-operator-69cb5bbdb9-cvtgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b85ebeb948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-cvtgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b85ebeb948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-cvtgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b85ebeb948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=2405 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-cvtgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b85ebeb948 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=2405 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-cvtgm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b85ebeb948 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1039 identity=2405 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-cvtgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b85ebeb948 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1039 identity=2405 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-cvtgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 976fc517-d71e-4fbf-82d9-1e13e5628eff default }" containerID=859d9c9a8cbb5a82756041c0336b49a69c2dc92516c50484b495a1a151982516 datapathConfiguration="&{false false false false false }" interface=lxc90b83223273f k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=859d9c9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=859d9c9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=859d9c9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=859d9c9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=999 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=859d9c9a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=999 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=859d9c9a8c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=217 identity=999 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=859d9c9a8c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=217 identity=999 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 31ab92df-82f1-4475-940d-1503a5936cbc default }" containerID=6ecea9a6fe3a68aeabf1d90dadfa4c9e14f3b3069c7df3039a8113a58eb618d0 datapathConfiguration="&{false false false false false }" interface=lxc57604d4cefd3 k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ecea9a6fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ecea9a6fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ecea9a6fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 identity=24198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ecea9a6fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3012 identity=24198 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ecea9a6fe datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3012 identity=24198 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ecea9a6fe datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3012 identity=24198 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ecea9a6fe endpointID=3012 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6ecea9a6fe datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3012 identity=24198 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30970d6e-51a8-4373-9191-45637f95cf7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 625cd155-d456-4925-945b-8d45668bab39 default }" containerID=ec7f1976d27cf7641aa5b309a0f18d3c77693ffc7ccbccd719029b43cb334726 datapathConfiguration="&{false false false false false }" interface=lxce8451e6f5465 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec7f1976d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec7f1976d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec7f1976d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=5753 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec7f1976d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=5753 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ec7f1976d2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2722 identity=5753 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec7f1976d2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2722 identity=5753 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 4bcdac17-2885-481d-9942-949a18275c4e default }" containerID=5914c03f8797361ef6c9b3702442e1e28418bdee765f0b6ec2fbbf7eded11cfb datapathConfiguration="&{false false false false false }" interface=lxc9856dd4b8603 k8sPodName=openstack/memcached-memcached-6479589586-wnkmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5914c03f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wnkmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5914c03f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wnkmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5914c03f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wnkmh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5914c03f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=20843 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wnkmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5914c03f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=20843 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wnkmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5914c03f87 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1117 identity=20843 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wnkmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5914c03f87 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1117 identity=20843 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wnkmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e715b879-0339-4fc6-8f25-b5d7ee2436ab] Description:}]" policyAddRequest=2c24c83a-49fb-4f0f-bd98-a13bb895143a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2c24c83a-49fb-4f0f-bd98-a13bb895143a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.240 578e869c-dc15-4d62-8475-01cb42432e33 default }" containerID=be252d49bd269105cb5de81c8c02e6dc27dd2d6a546439fcbd38c801f62e51db datapathConfiguration="&{false false false false false }" interface=lxca94dba4a13f9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be252d49bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be252d49bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be252d49bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=17307 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be252d49bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=17307 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=be252d49bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=229 identity=17307 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be252d49bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=229 identity=17307 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.038460492316061475 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.43 d00768f3-e058-48cc-84a4-50aab4a9fc9a default }" containerID=db485405e1f0cd02b65a036f7d2c567128d8ebc1375d02af21d0a35724593e22 datapathConfiguration="&{false false false false false }" interface=lxcffb16404f801 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbqpl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db485405e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2672 ipv4=10.0.0.43 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbqpl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db485405e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2672 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.43 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbqpl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db485405e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2672 identity=19762 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.43 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbqpl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db485405e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2672 identity=19762 ipv4=10.0.0.43 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbqpl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db485405e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2672 identity=19762 ipv4=10.0.0.43 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbqpl subsys=endpoint level=info msg="Successful endpoint creation" containerID=db485405e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2672 identity=19762 ipv4=10.0.0.43 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qbqpl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 9244fb67-b27c-4827-bce9-eab55b7a4fce default }" containerID=c3c4a94b40355564376a249e05f17053f1acde7610a5e3f0cf699854b4ac1f0b datapathConfiguration="&{false false false false false }" interface=lxcd76ec049b047 k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3c4a94b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3c4a94b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3c4a94b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=23244 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3c4a94b40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=23244 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c3c4a94b40 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=43 identity=23244 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3c4a94b40 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=43 identity=23244 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3c4a94b40 endpointID=43 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-4vcgb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1628ac71-60a4-458f-8be6-d24cb9542796 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c3c4a94b40 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=43 identity=23244 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4vcgb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 480e618d-01c5-418f-86da-29fdbd60f7b0 default }" containerID=442ad451fd3d11d680ba52774ce6e2c494d4236380426ca7ac05efe0fa80262f datapathConfiguration="&{false false false false false }" interface=lxc29df56c189e1 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-77775 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=442ad451fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-77775 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=442ad451fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-77775 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=442ad451fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=13086 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-77775 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=442ad451fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=13086 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-77775 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 5367a765-22f2-4325-9c8e-28a4085fe838 default }" containerID=7444c1b5d23162e66362cdfbdb766b1d9048ead71aef334edcde08390758e85c datapathConfiguration="&{false false false false false }" interface=lxcaa49201a6f2c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9p9lj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7444c1b5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9p9lj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7444c1b5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9p9lj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7444c1b5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=44512 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9p9lj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7444c1b5d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=44512 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9p9lj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 6c8a0dc9-78d9-4d34-9ceb-fd34a29de7df default }" containerID=9aeae6f7bfef6590b4dc95aa75ed3e9eb238ebfdaee252d468fc9823d2ca848c datapathConfiguration="&{false false false false false }" interface=lxc6102c6300fc6 k8sPodName=monitoring/kube-prometheus-stack-grafana-69c5b46446-2szbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9aeae6f7bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69c5b46446-2szbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9aeae6f7bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69c5b46446-2szbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9aeae6f7bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=28018 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69c5b46446-2szbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9aeae6f7bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3867 identity=28018 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69c5b46446-2szbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=442ad451fd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=310 identity=13086 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-77775 subsys=endpoint level=info msg="Successful endpoint creation" containerID=442ad451fd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=310 identity=13086 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-77775 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7444c1b5d2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=536 identity=44512 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9p9lj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7444c1b5d2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=536 identity=44512 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9p9lj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9aeae6f7bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3867 identity=28018 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69c5b46446-2szbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9aeae6f7bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3867 identity=28018 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69c5b46446-2szbm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.251 c41a5e3a-66c5-43b7-86a0-ca0f986044bb default }" containerID=80c5777e81c25415aea3689a9d01ec76ab124012e1c6b68c6e2853d678151a85 datapathConfiguration="&{false false false false false }" interface=lxcd202241e80b6 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80c5777e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80c5777e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80c5777e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=36971 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80c5777e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=36971 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80c5777e81 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2249 identity=36971 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=80c5777e81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2249 identity=36971 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 d0d8c2e6-c2dc-4950-8449-846be7b65cf9 default }" containerID=e398eb9f670cf0ca7c8fb829042f1cfc810dcef6c6e2c779e9707e9eb1e6d6f4 datapathConfiguration="&{false false false false false }" interface=lxcf3d35cd23cd3 k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e398eb9f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e398eb9f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e398eb9f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=24198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e398eb9f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1886 identity=24198 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e398eb9f67 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1886 identity=24198 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a subsys=endpoint level=info msg="Successful endpoint creation" containerID=e398eb9f67 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1886 identity=24198 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a subsys=daemon level=info msg="Delete endpoint request" containerID=80c5777e81 endpointID=2249 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-7cx5s subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=14981c12-40f0-4206-b7a2-0daeb48d7ae2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Create endpoint request" addressing="&{10.0.0.125 6e65b1bb-30f7-4b1b-9647-a9c4ba2f3927 default }" containerID=685fdd36b08811f7a6d0f14bface167aed09ad0805ae3fcba1b1d3471ff98cc9 datapathConfiguration="&{false false false false false }" interface=lxc930e7fb504a9 k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=685fdd36b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=685fdd36b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=685fdd36b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=24198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=685fdd36b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=24198 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 subsys=endpoint level=info msg="Removed endpoint" containerID=80c5777e81 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2249 identity=36971 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7cx5s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=685fdd36b0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1102 identity=24198 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 subsys=endpoint level=info msg="Successful endpoint creation" containerID=685fdd36b0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1102 identity=24198 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 subsys=daemon level=info msg="Delete endpoint request" containerID=685fdd36b0 endpointID=1102 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=e398eb9f67 endpointID=1886 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=685fdd36b0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1102 identity=24198 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d56cf71-3cf6-437a-bccb-d476f3a62f36 subsys=endpoint level=info msg="Removed endpoint" containerID=e398eb9f67 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1886 identity=24198 ipv4=10.0.0.132 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-110add6b-9844-41f9-a8ff-2e27272e8f9a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 908329ed-f722-4860-ba3a-66dcacb59d6c default }" containerID=a8462cbbf923e228484b6111dc5a68a53f46483f8b6b90e54b0c807d6479f23f datapathConfiguration="&{false false false false false }" interface=lxcbda65fd7bb84 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8462cbbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8462cbbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8462cbbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identity=59229 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8462cbbf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identity=59229 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8462cbbf9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3104 identity=59229 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8462cbbf9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3104 identity=59229 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.109 b370ffb8-3f93-4bf3-a254-443e81304037 default }" containerID=439f791496fb18fd1a91696d1ae55992bc1c62355630b03167e1cb6d1067bb42 datapathConfiguration="&{false false false false false }" interface=lxccbd32bf6a980 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=439f791496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=439f791496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=439f791496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=17419 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=439f791496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=17419 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=439f791496 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1068 identity=17419 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=439f791496 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1068 identity=17419 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 57831d7d-26d6-405f-bc6f-8183d2a2bc5b default }" containerID=6b51c1abd1535335b57ec98f7985ae9c192c65a9f3122c4c202870238e9effc9 datapathConfiguration="&{false false false false false }" interface=lxce593ef2810da k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b51c1abd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b51c1abd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b51c1abd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identity=24198 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b51c1abd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identity=24198 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b51c1abd1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=332 identity=24198 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b51c1abd1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=332 identity=24198 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 subsys=daemon level=info msg="Delete endpoint request" containerID=6b51c1abd1 endpointID=332 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6b51c1abd1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=332 identity=24198 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7b88b37b-a66b-4488-ae74-7128bb10cdf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 19dbb198-c0cf-47cf-a4fb-4b386a1535cb default }" containerID=917bfa432d7ce0439397abe991f3ac6c80a50d78bdeafbedc8a5422538fdcb18 datapathConfiguration="&{false false false false false }" interface=lxcd764953137a6 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=917bfa432d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=917bfa432d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=917bfa432d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=917bfa432d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=1650 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=917bfa432d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3533 identity=1650 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=917bfa432d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3533 identity=1650 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=917bfa432d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3533 identity=1650 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 08b4d709-a210-4de0-9494-74268edd2362 default }" containerID=3319cc73e788bc7cf5cbdb68d1b11e583edf65cf1d8324f31cdb5b1194f44d7f datapathConfiguration="&{false false false false false }" interface=lxc5252e1000960 k8sPodName=openstack/keystone-api-76b9b95898-mhs5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3319cc73e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-api-76b9b95898-mhs5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3319cc73e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-api-76b9b95898-mhs5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3319cc73e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=12155 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-api-76b9b95898-mhs5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3319cc73e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=12155 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-api-76b9b95898-mhs5n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 7b5cd9f0-7379-43b1-94b7-29e59571aab3 default }" containerID=2798e1e85999c10d041ccb18b99a12c31c2da9e6c6b28dea244fc3c679ee551e datapathConfiguration="&{false false false false false }" interface=lxc78423ad6c886 k8sPodName=openstack/keystone-credential-setup-9bhgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2798e1e859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-9bhgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2798e1e859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87b44d8b-157a-4610-aa66-ad329327147e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=87b44d8b-157a-4610-aa66-ad329327147e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-9bhgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=87b44d8b-157a-4610-aa66-ad329327147e;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=87b44d8b-157a-4610-aa66-ad329327147e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2798e1e859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=37274 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87b44d8b-157a-4610-aa66-ad329327147e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=87b44d8b-157a-4610-aa66-ad329327147e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-9bhgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2798e1e859 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=37274 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-9bhgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3319cc73e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=23 identity=12155 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-api-76b9b95898-mhs5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=3319cc73e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=23 identity=12155 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-api-76b9b95898-mhs5n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2798e1e859 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=492 identity=37274 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-9bhgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2798e1e859 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=492 identity=37274 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-9bhgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2798e1e859 endpointID=492 k8sNamespace=openstack k8sPodName=keystone-credential-setup-9bhgg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=87b44d8b-157a-4610-aa66-ad329327147e k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=87b44d8b-157a-4610-aa66-ad329327147e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2798e1e859 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=492 identity=37274 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-9bhgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 ee8fb26b-8bea-4900-bae0-3e1d26f8d73a default }" containerID=55a3c9a19afc9f88afac43372715493c76837a45f852c0b5231cfe24881dfae4 datapathConfiguration="&{false false false false false }" interface=lxc195ddeeb69c6 k8sPodName=openstack/keystone-db-init-5x5pj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55a3c9a19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-init-5x5pj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55a3c9a19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7cd8f844-169d-4026-9393-c68330c28820,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7cd8f844-169d-4026-9393-c68330c28820,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-init-5x5pj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7cd8f844-169d-4026-9393-c68330c28820;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7cd8f844-169d-4026-9393-c68330c28820;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=55a3c9a19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=31491 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7cd8f844-169d-4026-9393-c68330c28820,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7cd8f844-169d-4026-9393-c68330c28820,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-init-5x5pj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55a3c9a19a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=31491 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-init-5x5pj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55a3c9a19a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=519 identity=31491 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-init-5x5pj subsys=endpoint level=info msg="Successful endpoint creation" containerID=55a3c9a19a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=519 identity=31491 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-init-5x5pj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55a3c9a19a endpointID=519 k8sNamespace=openstack k8sPodName=keystone-db-init-5x5pj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7cd8f844-169d-4026-9393-c68330c28820 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7cd8f844-169d-4026-9393-c68330c28820 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=55a3c9a19a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=519 identity=31491 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-init-5x5pj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 b304b472-fb6a-4e9d-b631-59411a6780e0 default }" containerID=56307339b8db721be5425accd5bc04ee6e70053dd107f65eae8717a5115532b6 datapathConfiguration="&{false false false false false }" interface=lxc0b6b5b00304a k8sPodName=openstack/keystone-fernet-setup-nznnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56307339b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-fernet-setup-nznnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56307339b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-fernet-setup-nznnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56307339b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=52218 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-fernet-setup-nznnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56307339b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=52218 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-fernet-setup-nznnw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=56307339b8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=117 identity=52218 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-fernet-setup-nznnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=56307339b8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=117 identity=52218 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-fernet-setup-nznnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=56307339b8 endpointID=117 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-nznnw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=41ca6d63-ecc7-4c6b-b278-01661aa625f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=56307339b8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=117 identity=52218 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/keystone-fernet-setup-nznnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 8fc32833-0803-4cb9-953b-dadc45bef7e2 default }" containerID=dde48c5f799f2c1e22678a67af1792a2a147983881a677372fb77164c2203afa datapathConfiguration="&{false false false false false }" interface=lxc321574da8440 k8sPodName=openstack/keystone-db-sync-42fzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dde48c5f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-42fzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dde48c5f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-42fzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dde48c5f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 identity=64634 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-42fzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dde48c5f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 identity=64634 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-42fzz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dde48c5f79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3182 identity=64634 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-42fzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dde48c5f79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3182 identity=64634 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-42fzz subsys=daemon level=info msg="Delete endpoint request" containerID=dde48c5f79 endpointID=3182 k8sNamespace=openstack k8sPodName=keystone-db-sync-42fzz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=aa087528-1e32-43ba-8659-e4a97e5a1f41 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dde48c5f79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3182 identity=64634 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-42fzz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 9463049d-8f1e-4f73-9d98-12b45cae0159 default }" containerID=cea7f51723479f05db811db2205b45b631c4d3c4a221174a66661559670ce299 datapathConfiguration="&{false false false false false }" interface=lxccec92e9783f7 k8sPodName=openstack/keystone-rabbit-init-2r5ql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cea7f51723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cea7f51723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cea7f51723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cea7f51723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=662 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cea7f51723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=662 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cea7f51723 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2321 identity=662 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql subsys=endpoint level=info msg="Successful endpoint creation" containerID=cea7f51723 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2321 identity=662 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cea7f51723 endpointID=2321 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-2r5ql subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3d08e30a-b586-47f5-9376-4a404aa9e4d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cea7f51723 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2321 identity=662 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/keystone-rabbit-init-2r5ql subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 10ba81cf-298d-4454-856a-59985afa4cbb default }" containerID=b9f5d4de4e987dcaa030f1f1593619c65d93ba607e6534277d24606ee94740a6 datapathConfiguration="&{false false false false false }" interface=lxc869998f8b0d4 k8sPodName=openstack/keystone-domain-manage-pxt42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9f5d4de4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-domain-manage-pxt42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9f5d4de4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-domain-manage-pxt42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9f5d4de4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=63613 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-domain-manage-pxt42 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b9f5d4de4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=63613 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-domain-manage-pxt42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9f5d4de4e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=485 identity=63613 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-domain-manage-pxt42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9f5d4de4e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=485 identity=63613 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-domain-manage-pxt42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9f5d4de4e endpointID=485 k8sNamespace=openstack k8sPodName=keystone-domain-manage-pxt42 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=4989164c-63f8-4221-ae14-a30f377fd97c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b9f5d4de4e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=485 identity=63613 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-domain-manage-pxt42 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 d047c90d-a202-44e3-aec1-8a0f678dbaa3 default }" containerID=3a6b80f83f798e6b4d76039be3d2194bac897ca91ecf58ebbbe7b39107a64f0c datapathConfiguration="&{false false false false false }" interface=lxcea25f8305a0e k8sPodName=openstack/keystone-bootstrap-dtcbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a6b80f83f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-bootstrap-dtcbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a6b80f83f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-bootstrap-dtcbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a6b80f83f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=11038 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-bootstrap-dtcbx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3a6b80f83f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=11038 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-bootstrap-dtcbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a6b80f83f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2491 identity=11038 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-bootstrap-dtcbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a6b80f83f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2491 identity=11038 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-bootstrap-dtcbx subsys=daemon level=info msg="Delete endpoint request" containerID=3a6b80f83f endpointID=2491 k8sNamespace=openstack k8sPodName=keystone-bootstrap-dtcbx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f5f97551-8ddf-458c-81f2-b8a9c69c47da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3a6b80f83f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2491 identity=11038 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-bootstrap-dtcbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 39f8cc3f-170a-4418-b3e9-1cd20f81e6a4 default }" containerID=ebf3348f328bac3e3342fda8d330fedaf416916f60a6ffcede96c61191de6dba datapathConfiguration="&{false false false false false }" interface=lxc8213d2e0316b k8sPodName=openstack/horizon-6687875654-bgkzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebf3348f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/horizon-6687875654-bgkzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebf3348f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/horizon-6687875654-bgkzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ebf3348f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/horizon-6687875654-bgkzx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebf3348f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=873 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/horizon-6687875654-bgkzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebf3348f32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=873 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/horizon-6687875654-bgkzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 fcd47e65-2533-44b5-8d79-a7e80e533bef default }" containerID=73fc9e5aa33694352e0e731f5f82e4781f8420730d8699d1695427f394532b68 datapathConfiguration="&{false false false false false }" interface=lxc0f8fb4a67765 k8sPodName=openstack/horizon-6687875654-7ft74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73fc9e5aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/horizon-6687875654-7ft74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73fc9e5aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/horizon-6687875654-7ft74 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=73fc9e5aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 identity=873 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/horizon-6687875654-7ft74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73fc9e5aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2870 identity=873 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/horizon-6687875654-7ft74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 093af99f-7991-4621-9b53-cd2949f89785 default }" containerID=edff3fcac9b4844ee49f3891d8b043fa38acd740b65dbc30a2bbf17e8cd51d54 datapathConfiguration="&{false false false false false }" interface=lxc9f3372510265 k8sPodName=openstack/horizon-6687875654-p655m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edff3fcac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/horizon-6687875654-p655m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edff3fcac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/horizon-6687875654-p655m subsys=endpoint level=info msg="Identity of endpoint changed" containerID=edff3fcac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=873 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/horizon-6687875654-p655m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edff3fcac9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=873 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/horizon-6687875654-p655m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebf3348f32 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=371 identity=873 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/horizon-6687875654-bgkzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebf3348f32 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=371 identity=873 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/horizon-6687875654-bgkzx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 96e2876c-e4ae-4df0-a11f-03b6a5d251f6 default }" containerID=a74c046b4a25c2dae66f532fd1e4db55304249a11e4ac7901e16a1db06a53c0e datapathConfiguration="&{false false false false false }" interface=lxcc6b90d445cc2 k8sPodName=openstack/horizon-db-init-b48wh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a74c046b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/horizon-db-init-b48wh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a74c046b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/horizon-db-init-b48wh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a74c046b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 identity=56051 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/horizon-db-init-b48wh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a74c046b4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2716 identity=56051 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/horizon-db-init-b48wh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73fc9e5aa3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2870 identity=873 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/horizon-6687875654-7ft74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=73fc9e5aa3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2870 identity=873 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/horizon-6687875654-7ft74 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=edff3fcac9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3963 identity=873 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/horizon-6687875654-p655m subsys=endpoint level=info msg="Successful endpoint creation" containerID=edff3fcac9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3963 identity=873 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/horizon-6687875654-p655m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a74c046b4a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2716 identity=56051 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/horizon-db-init-b48wh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a74c046b4a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2716 identity=56051 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/horizon-db-init-b48wh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a74c046b4a endpointID=2716 k8sNamespace=openstack k8sPodName=horizon-db-init-b48wh subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=70cfe27c-7d47-4714-94db-0624e2d44971 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=a74c046b4a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2716 identity=56051 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/horizon-db-init-b48wh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 b45df6d9-cfbc-4c5c-a5a7-fd41ec83e9e3 default }" containerID=145d00cab2962cf031b717cd08b6e11ef9d946676dcbbef065eb28589c1c711f datapathConfiguration="&{false false false false false }" interface=lxc716150768b97 k8sPodName=openstack/horizon-db-sync-q6g8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=145d00cab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/horizon-db-sync-q6g8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=145d00cab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/horizon-db-sync-q6g8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=145d00cab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 identity=57518 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/horizon-db-sync-q6g8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=145d00cab2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3879 identity=57518 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/horizon-db-sync-q6g8c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=145d00cab2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3879 identity=57518 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/horizon-db-sync-q6g8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=145d00cab2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3879 identity=57518 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/horizon-db-sync-q6g8c subsys=daemon level=info msg="Delete endpoint request" containerID=145d00cab2 endpointID=3879 k8sNamespace=openstack k8sPodName=horizon-db-sync-q6g8c subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=81ef1c7e-5f75-4a29-b336-9d9516bf2179 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=145d00cab2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3879 identity=57518 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/horizon-db-sync-q6g8c subsys=endpoint