level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="996.913µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.221µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="889.71µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.23µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.302243ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.75µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="21.171µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="71.812µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="137.903µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="82.922µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="454.7µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.87µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.261396ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.726525ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="39.041µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.401µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="218.875µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="96.693µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="71.072µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.539937ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="256.896µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.531µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.138.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.737303ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.324105ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="9.641µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.502969ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="34.911µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.12µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="53.932µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="301.617µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.221µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.24µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="243.585µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="915.82µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.2761ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.25µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.451µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.138 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.138 ipAddr.ipv6="" k8sNodeIP=199.204.45.138 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.138" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.142" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.138" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.138} {CiliumInternalIP 10.0.0.142}] 10.0.0.0/24 [] [] 10.0.0.65 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43165" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.445800252s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="16.96µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="10.83µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="51.861µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.011µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.629843301s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=315.376792ms file-path=/var/run/cilium/state/templates/e14b5724ddc33f696674896ef6f9a619ef2cb0bbd6bf3a90f650ebda1e74262e/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=54 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 7f3076a9-a88e-44ce-9141-7695d72910b1 default }" containerID=b1f06ecea689067e86b9435d94508f667d26d3b4bd8a14c0d216f036fbf6148d datapathConfiguration="&{false false false false false }" interface=lxc921af946c12e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1f06ecea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 98dd1b50-0e81-4890-8642-cee191ebdc97 default }" containerID=70fb53bfbea20fdd3ecfe53c5f9e056129494a80fc3b846d70ef9793736979dd datapathConfiguration="&{false false false false false }" interface=lxc227dd2eff60a k8sPodName=kube-system/coredns-7c96b6546b-s4tfj labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=b1f06ecea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=70fb53bfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70fb53bfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b1f06ecea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=46028 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1f06ecea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=46028 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf subsys=endpoint level=info msg="Invalid state transition skipped" containerID=70fb53bfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70fb53bfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=27984 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70fb53bfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=27984 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 ipv4=10.0.0.65 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identityLabels="reserved:health" ipv4=10.0.0.65 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=4 identityLabels="reserved:health" ipv4=10.0.0.65 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.101051024s file-path=/var/run/cilium/state/templates/d67f2114510a33bf0f790ada0fcb527dfef7efe6d79fe4370628b23200347806/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=70fb53bfbe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=631 identity=27984 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=70fb53bfbe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=631 identity=27984 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2080 identity=4 ipv4=10.0.0.65 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1f06ecea6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=383 identity=46028 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1f06ecea6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=383 identity=46028 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1f06ecea6 endpointID=383 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-64fhf subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a8594ccb-e632-4cf1-a9cc-edf9cd34d601 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=b1f06ecea6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=383 identity=46028 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-64fhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 9793279c-f508-471e-ae01-10d21f4e2a70 default }" containerID=8b74e791d52d34a4165e2bab2a70bde44581f50b731ec3c90d323be3f931c718 datapathConfiguration="&{false false false false false }" interface=lxc8919eeed2626 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-76zhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b74e791d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 ipv4=10.0.0.182 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-76zhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b74e791d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.182 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-76zhv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b74e791d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 identity=25459 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.182 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-76zhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b74e791d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2346 identity=25459 ipv4=10.0.0.182 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-76zhv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8b74e791d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2346 identity=25459 ipv4=10.0.0.182 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-76zhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b74e791d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2346 identity=25459 ipv4=10.0.0.182 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-76zhv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=54 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00054 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00054 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00054 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00054:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=54 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 8d4e0647-faa4-49a0-82c4-12fa6a5de83e default }" containerID=87780127c03b5220ab4821f6101a2cd06ef5a5322d2884c61a00e832a6303400 datapathConfiguration="&{false false false false false }" interface=lxc31bf21904774 k8sPodName=kube-system/coredns-67659f764b-rlvbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87780127c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/coredns-67659f764b-rlvbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87780127c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/coredns-67659f764b-rlvbs subsys=endpoint level=info msg="Identity of endpoint changed" containerID=87780127c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=27984 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/coredns-67659f764b-rlvbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87780127c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=27984 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/coredns-67659f764b-rlvbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 ac07d477-e97d-49e4-b34a-378ef3d11d81 default }" containerID=23a53d7ec5b8a3c195d45f7155934f5b6422a77361b7ebd9bb051bfda6494448 datapathConfiguration="&{false false false false false }" interface=lxc2411a6fb905d k8sPodName=kube-system/coredns-67659f764b-vpf6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23a53d7ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-vpf6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23a53d7ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-vpf6v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=23a53d7ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=27984 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-vpf6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23a53d7ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1214 identity=27984 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-vpf6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87780127c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=57 identity=27984 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/coredns-67659f764b-rlvbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=87780127c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=57 identity=27984 ipv4=10.0.0.164 ipv6= k8sPodName=kube-system/coredns-67659f764b-rlvbs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23a53d7ec5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1214 identity=27984 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-vpf6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=23a53d7ec5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1214 identity=27984 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-vpf6v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 04b6e111-6642-472d-8f21-89b9caf8b596 default }" containerID=cdc1a34f7d79fd3862c655f983b489daf1cd3b36e4f9d2ae6821b2ce86a55c36 datapathConfiguration="&{false false false false false }" interface=lxcd0a2dcac2786 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdc1a34f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdc1a34f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cdc1a34f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdc1a34f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=26235 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdc1a34f7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=26235 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdc1a34f7d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=591 identity=26235 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdc1a34f7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=591 identity=26235 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-q5f9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70fb53bfbe endpointID=631 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-s4tfj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=70fb53bfbe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=631 identity=27984 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-s4tfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 2019b1a0-b73a-4437-8704-f6d1639d6c7d default }" containerID=443b84fe8b4c63ad06462edc57595bcffeda1d4487c35cbaa2b80792e4f722ee datapathConfiguration="&{false false false false false }" interface=lxcfb295cf0b252 k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=443b84fe8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=443b84fe8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=443b84fe8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=443b84fe8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=39135 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=443b84fe8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=39135 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 5d38dfe3-6cd1-41ef-838a-acda6357c573 default }" containerID=23cfff3202966accaa8697018c73747355c11f58634daacf102e9aba9157c807 datapathConfiguration="&{false false false false false }" interface=lxc69624a8c31d4 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8q4nm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23cfff3202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8q4nm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23cfff3202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8q4nm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23cfff3202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 identity=4351 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8q4nm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23cfff3202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1676 identity=4351 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8q4nm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=443b84fe8b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3659 identity=39135 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=443b84fe8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3659 identity=39135 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4qzb5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 a40dfc7a-460c-4bea-9f68-b5139ae810ac default }" containerID=60c7b3062f57b2f90eecf8549603f2a50cd638929fb35009eec1adffe9777c64 datapathConfiguration="&{false false false false false }" interface=lxc45710457ca48 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5v27l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60c7b3062f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5v27l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60c7b3062f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5v27l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60c7b3062f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=50624 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5v27l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60c7b3062f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=50624 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5v27l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23cfff3202 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1676 identity=4351 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8q4nm subsys=endpoint level=info msg="Successful endpoint creation" containerID=23cfff3202 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1676 identity=4351 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8q4nm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=60c7b3062f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=76 identity=50624 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5v27l subsys=endpoint level=info msg="Successful endpoint creation" containerID=60c7b3062f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=76 identity=50624 ipv4=10.0.0.99 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5v27l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.223 6804cdbb-d6d0-4b19-9b54-44100908602b default }" containerID=3960e248cbfcc11b7cdd056355fe994590644a5b9905981e5ea48050841a9df5 datapathConfiguration="&{false false false false false }" interface=lxcf019f19b0807 k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3960e248cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3960e248cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3960e248cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=16498 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3960e248cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3156 identity=16498 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3960e248cb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3156 identity=16498 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3960e248cb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3156 identity=16498 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3960e248cb endpointID=3156 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-87ppp subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=7a9fa901-7335-42c3-980e-d54c5719a226 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=3960e248cb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3156 identity=16498 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-87ppp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 5e9756e1-2536-40f2-a13c-69660ca9d864 default }" containerID=82e76c42efe1a3df688219857bc95a4446308f426f219f530c20c45ba4716599 datapathConfiguration="&{false false false false false }" interface=lxca1b699cd99f7 k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82e76c42ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82e76c42ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82e76c42ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=25532 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=82e76c42ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=25532 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82e76c42ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3222 identity=25532 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r subsys=endpoint level=info msg="Successful endpoint creation" containerID=82e76c42ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3222 identity=25532 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=82e76c42ef endpointID=3222 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-s772r subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=94aa49b6-75f1-44de-9fe2-2dd5c517ce40 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=82e76c42ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3222 identity=25532 ipv4=10.0.0.134 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-s772r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 d35d10fc-47ce-4d9b-ae7c-e5acb8c3a430 default }" containerID=1385b89dd302a713d9bc1b9bfc9e7a5cba9c6a4d3f87086bb4563998a988b7fc datapathConfiguration="&{false false false false false }" interface=lxcc52d76e59207 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1385b89dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1385b89dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1385b89dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1385b89dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=16658 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1385b89dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=16658 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1385b89dd3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=367 identity=16658 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f subsys=endpoint level=info msg="Successful endpoint creation" containerID=1385b89dd3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=367 identity=16658 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n827f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.128 1d33dc22-2be5-4121-9e6f-67c8de23aae3 default }" containerID=e98ea0a05e138c5fd5d5de8431b944c21c5534a55c8138ac8b92e97726e45f41 datapathConfiguration="&{false false false false false }" interface=lxc4bfaf6d4f03a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e98ea0a05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 ipv4=10.0.0.128 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e98ea0a05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.128 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e98ea0a05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=31421 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.128 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e98ea0a05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=31421 ipv4=10.0.0.128 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e98ea0a05e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1649 identity=31421 ipv4=10.0.0.128 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e98ea0a05e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1649 identity=31421 ipv4=10.0.0.128 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e98ea0a05e endpointID=1649 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-thkkr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=214151fc-b1ad-41ba-8f87-b11e149804de k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e98ea0a05e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1649 identity=31421 ipv4=10.0.0.128 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-thkkr subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0c18dd60-79d5-4040-807e-de56121bc150] Description:}]" policyAddRequest=03707be6-eada-46c6-abff-d52b3f6eb50b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=03707be6-eada-46c6-abff-d52b3f6eb50b policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3fe43890-236d-4a21-855e-e0291f32e752] Description:}]" policyAddRequest=7259c6f8-9303-4c54-8b58-37e58f373b2a subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=7259c6f8-9303-4c54-8b58-37e58f373b2a policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 1b98cece-8c95-4030-a9d8-15655cc9454a default }" containerID=0c2cd1571a4fe8ca7758fbf2f94f1f1ec1d48f8751ef3c8e044f2f7f970385c4 datapathConfiguration="&{false false false false false }" interface=lxcbe9da6249473 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-mklnp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c2cd1571a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-mklnp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c2cd1571a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-mklnp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c2cd1571a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=17031 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-mklnp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c2cd1571a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=17031 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-mklnp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0c2cd1571a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2075 identity=17031 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-mklnp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c2cd1571a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2075 identity=17031 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-mklnp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 fa8c2abb-4e9b-4e54-be0d-42b61d9fdcdf default }" containerID=d29532f95f45bfe385b5c0c3b6685054df4b0d523a4208ec058264e6806f5158 datapathConfiguration="&{false false false false false }" interface=lxc179def43252e k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jzl6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d29532f95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jzl6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d29532f95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jzl6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d29532f95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=33503 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jzl6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d29532f95f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=33503 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jzl6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d29532f95f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=405 identity=33503 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jzl6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d29532f95f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=405 identity=33503 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-jzl6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 3dc2cfd8-e7a8-490d-bd6d-aef8fc15ffd5 default }" containerID=8945e2abb8c8bcbc4e2e0660659708547242da6d0906ff890c8ff0dc5ca723b1 datapathConfiguration="&{false false false false false }" interface=lxc4f8a11114f0c k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8945e2abb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8945e2abb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8945e2abb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8945e2abb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=61386 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8945e2abb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=61386 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8945e2abb8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=971 identity=61386 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln subsys=endpoint level=info msg="Successful endpoint creation" containerID=8945e2abb8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=971 identity=61386 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-2lqln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 c5e7168c-d900-407d-84f6-aaaf8ebb70df default }" containerID=a84be9fd25e4a6c8425ebed905908c806e3e8ab001832e1027faa3ca959c88bc datapathConfiguration="&{false false false false false }" interface=lxc8dbd27a014e7 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a84be9fd25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a84be9fd25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a84be9fd25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a84be9fd25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=24781 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a84be9fd25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1394 identity=24781 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 dc14f479-b01a-49dc-8b11-2a3010859e8d default }" containerID=a4c8fcd7ef8a45703882d765e705876e89f2686f7f6b0c970db7e1480f197988 datapathConfiguration="&{false false false false false }" interface=lxc23d584988d7d k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4c8fcd7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4c8fcd7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4c8fcd7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=60412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4c8fcd7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=60412 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a84be9fd25 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1394 identity=24781 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a84be9fd25 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1394 identity=24781 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a4c8fcd7ef datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=100 identity=60412 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4c8fcd7ef datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=100 identity=60412 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a4c8fcd7ef endpointID=100 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a4c8fcd7ef datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=100 identity=60412 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3cb3d7b4-a1b3-4522-ae50-b0801cee6ec8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 6c26bae3-2a38-4311-8600-737a642ee9c0 default }" containerID=eea6ab05ce2fab0358bae24d29be61eab7b009b057a80ee4a50113bdf6fa84aa datapathConfiguration="&{false false false false false }" interface=lxc0d0ec5c583d1 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eea6ab05ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eea6ab05ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eea6ab05ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identity=7921 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eea6ab05ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1142 identity=7921 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eea6ab05ce datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1142 identity=7921 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eea6ab05ce datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1142 identity=7921 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=98f3a24d-744d-45aa-ab30-4b03ce1ce20a] Description:}]" policyAddRequest=5832e6ab-d178-4b8e-ada1-0d066c65a899 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5832e6ab-d178-4b8e-ada1-0d066c65a899 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.89 77faa93d-4250-4315-b52e-b5c572ee9c7f default }" containerID=58eceb28f79e20707e96fbe1b6e646d9408ada15d7edcdd961992b6e8d05955f datapathConfiguration="&{false false false false false }" interface=lxc19acec09bd9a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58eceb28f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58eceb28f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58eceb28f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 identity=32925 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58eceb28f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 identity=32925 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=58eceb28f7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3224 identity=32925 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58eceb28f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3224 identity=32925 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010189105468908518 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.115 065103e9-46c3-429d-b59b-dc721a8b1792 default }" containerID=cf8d426837bac48a7eb592e5055a42bff80d5a7e379c1d89c0c3ae4f9fae03fd datapathConfiguration="&{false false false false false }" interface=lxcade594b7e132 k8sPodName=monitoring/node-feature-discovery-worker-xnt8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf8d426837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xnt8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf8d426837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xnt8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf8d426837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=4906 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xnt8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf8d426837 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2378 identity=4906 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xnt8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 5e0e318e-13fc-43e3-8f84-a86eb135f3cd default }" containerID=aa7a997b7f4c96d6c881766c26820a2a8dd1d456768a1d6878ed7fd1008a99e9 datapathConfiguration="&{false false false false false }" interface=lxc44df3da34b96 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hcwvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa7a997b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hcwvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa7a997b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hcwvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa7a997b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=3078 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hcwvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa7a997b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=3078 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hcwvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf8d426837 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2378 identity=4906 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xnt8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf8d426837 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2378 identity=4906 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xnt8b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 f547a01e-5215-48a6-9a81-7e6f406d22bf default }" containerID=24bb3e932acf06a97ef5efdaf2b3c8928f934aa0387ee6996cbfe7816b7167c2 datapathConfiguration="&{false false false false false }" interface=lxca68b87921573 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vnxc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24bb3e932a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vnxc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24bb3e932a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vnxc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24bb3e932a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=36370 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vnxc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24bb3e932a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=36370 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vnxc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa7a997b7f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1837 identity=3078 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hcwvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa7a997b7f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1837 identity=3078 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-hcwvh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=24bb3e932a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=140 identity=36370 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vnxc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24bb3e932a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=140 identity=36370 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-vnxc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.70 e1e0f262-6cdf-43a1-9758-489b04b3a849 default }" containerID=7b4a9ed668d522a097486b650f91ba065cf3f111c28dc5e8c7a9ac52ff2cb6ad datapathConfiguration="&{false false false false false }" interface=lxcb49aab227d79 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bw8b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b4a9ed668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 ipv4=10.0.0.70 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bw8b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b4a9ed668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.70 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bw8b5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b4a9ed668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identity=52471 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.70 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bw8b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b4a9ed668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1219 identity=52471 ipv4=10.0.0.70 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bw8b5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b4a9ed668 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1219 identity=52471 ipv4=10.0.0.70 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bw8b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b4a9ed668 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1219 identity=52471 ipv4=10.0.0.70 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bw8b5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=54 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00054 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00054 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00054 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00054:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=54 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 d23a3cec-1383-4879-ac7b-9dfa91f2ebf3 default }" containerID=57ad1b44f2e4a7f67a64540ef4584410e9f4c06d59da5cda283b33c4db2e0fe5 datapathConfiguration="&{false false false false false }" interface=lxc4463298e5d88 k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57ad1b44f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57ad1b44f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57ad1b44f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=30856 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=57ad1b44f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=30856 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57ad1b44f2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=998 identity=30856 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp subsys=endpoint level=info msg="Successful endpoint creation" containerID=57ad1b44f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=998 identity=30856 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57ad1b44f2 endpointID=998 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-rldlp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=7230bfd5-abea-4281-9125-a0b1e977de1a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=57ad1b44f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=998 identity=30856 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rldlp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 36545ea4-d2e0-43b9-adf6-df9db32fddc1 default }" containerID=bb285eb934419ba0d5ed4e6fe46129bb4b7054bfc81d9d2ce3c964011d9f16fc datapathConfiguration="&{false false false false false }" interface=lxc1922ab663e56 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-tvnkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb285eb934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-tvnkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb285eb934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-tvnkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb285eb934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=49269 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-tvnkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb285eb934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=49269 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-tvnkk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 d3c264ac-28c7-4aeb-b3a0-d7c452fcc193 default }" containerID=d2083ca63a87bad83feaedcc89aca5ea44e7e2e096ae26a7630642afd3e7d070 datapathConfiguration="&{false false false false false }" interface=lxc12c33538f4b0 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qldtv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2083ca63a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qldtv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2083ca63a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qldtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.163 0abbb18c-f070-43e4-87a9-9a9095125446 default }" containerID=496da2102d764bc5c6f1aef5e2f4486aef1535fdedafb1872fc7039e64f01334 datapathConfiguration="&{false false false false false }" interface=lxcb32fcd84a001 k8sPodName=monitoring/kube-prometheus-stack-grafana-6cdf685b79-pdx7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=496da2102d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cdf685b79-pdx7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=496da2102d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cdf685b79-pdx7h subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2083ca63a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=16366 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qldtv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2083ca63a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=478 identity=16366 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qldtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=496da2102d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=59482 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cdf685b79-pdx7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=496da2102d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2757 identity=59482 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cdf685b79-pdx7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb285eb934 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=20 identity=49269 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-tvnkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb285eb934 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=20 identity=49269 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-tvnkk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2083ca63a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=478 identity=16366 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qldtv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2083ca63a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=478 identity=16366 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-qldtv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=496da2102d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2757 identity=59482 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cdf685b79-pdx7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=496da2102d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2757 identity=59482 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cdf685b79-pdx7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 29960d40-5574-4cb0-8352-55446b8c0fa0 default }" containerID=0adba1ac121258f8242c65a135a3427a24a4be32b0ad92950a7104fb4ba8c331 datapathConfiguration="&{false false false false false }" interface=lxcd4b31938abd9 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0adba1ac12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0adba1ac12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0adba1ac12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 identity=19400 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0adba1ac12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 identity=19400 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0adba1ac12 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3178 identity=19400 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0adba1ac12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3178 identity=19400 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0adba1ac12 endpointID=3178 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bm2sn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=99d11414-3136-437c-9658-8f4e1b8cfc7c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0adba1ac12 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3178 identity=19400 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bm2sn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 422981b8-2247-400c-a67b-2f404fb1a19c default }" containerID=f76b057b170acad5d4180ce921c5e9475b0fb7b9342b90bbdd7bb52646b2e2ef datapathConfiguration="&{false false false false false }" interface=lxc866998fc46cb k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f76b057b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f76b057b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f76b057b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 identity=60412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f76b057b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3241 identity=60412 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f76b057b17 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3241 identity=60412 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f76b057b17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3241 identity=60412 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.174 a101a50e-6012-4854-93e7-2c91d816fe56 default }" containerID=175b9c4de210a4d682b1a5115c668d0f9914767fe25eb7efab4e1f4969fe28b8 datapathConfiguration="&{false false false false false }" interface=lxc00165b20d360 k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=175b9c4de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=175b9c4de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=175b9c4de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 identity=60412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=175b9c4de2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3016 identity=60412 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=175b9c4de2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3016 identity=60412 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 subsys=endpoint level=info msg="Successful endpoint creation" containerID=175b9c4de2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3016 identity=60412 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 subsys=daemon level=info msg="Delete endpoint request" containerID=f76b057b17 endpointID=3241 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=175b9c4de2 endpointID=3016 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f76b057b17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3241 identity=60412 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ee264a4f-63b2-42be-8d30-70791b65ff20 subsys=endpoint level=info msg="Removed endpoint" containerID=175b9c4de2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3016 identity=60412 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7895a2b8-e5a6-4962-9522-a8dd961bf917 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 358a8b48-6639-46fe-a045-463172ee2cef default }" containerID=9a900ba6e9a0d81157e4b67e2f4dab433783279e0d752935ce53256ea68d6211 datapathConfiguration="&{false false false false false }" interface=lxcf8675faabf6b k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a900ba6e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a900ba6e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9a900ba6e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a900ba6e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=4128 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a900ba6e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=4128 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a900ba6e9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=481 identity=4128 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a900ba6e9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=481 identity=4128 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.30 c52b9aff-e099-4cb3-99f2-d3d44656c428 default }" containerID=c6e5e0a27105d8d0f06fa4196ac544e62db9504b00c72eb0fc9e9e30d594326a datapathConfiguration="&{false false false false false }" interface=lxc76b53d603999 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6e5e0a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6e5e0a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6e5e0a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=4464 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6e5e0a271 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=4464 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6e5e0a271 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=421 identity=4464 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6e5e0a271 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=421 identity=4464 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 fb4688fa-0ad2-4ac1-b617-acec27f435a1 default }" containerID=33148d09353cc1f0b35a16320cca769f358d43430d0fe644bfde9ebc3100be0c datapathConfiguration="&{false false false false false }" interface=lxca82b74de5741 k8sPodName=monitoring/loki-gateway-748b556d75-l7tws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33148d0935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-l7tws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33148d0935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-l7tws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.229 40d6a479-b9b3-440d-a809-73156505c2d4 default }" containerID=8d80579cf86dd8750fb90f494ec3acc50a56a42d201a8d5784d008a66d0419db datapathConfiguration="&{false false false false false }" interface=lxc97347de6aed0 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d80579cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d80579cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=33148d0935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=44377 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-l7tws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33148d0935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=44377 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-l7tws subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d80579cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=10539 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d80579cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=10539 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 4bc55b12-ae24-4853-9cad-d65d1716677a default }" containerID=e5f64aedce7366547c7ebe4acc521130fbd52108c48d3943644c8343bed27ec4 datapathConfiguration="&{false false false false false }" interface=lxca08bdbdf5426 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5f64aedce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5f64aedce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5f64aedce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 identity=4832 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5f64aedce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 identity=4832 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33148d0935 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3493 identity=44377 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-l7tws subsys=endpoint level=info msg="Successful endpoint creation" containerID=33148d0935 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3493 identity=44377 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-l7tws subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d80579cf8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=735 identity=10539 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d80579cf8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=735 identity=10539 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e5f64aedce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3127 identity=4832 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5f64aedce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3127 identity=4832 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 252b0452-24a1-4cd2-a3bd-00dab8fb7180 default }" containerID=aa276ad2bd90d05c800d6dc0bb843ff8daaf3a9ff01fba54dec02499c7fba9e2 datapathConfiguration="&{false false false false false }" interface=lxc022ed67f8df1 k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa276ad2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa276ad2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa276ad2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=60412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa276ad2bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=60412 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa276ad2bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2814 identity=60412 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa276ad2bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2814 identity=60412 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 70db5b92-9f7f-42d3-9a59-3b2c6030337c default }" containerID=abc55e60e3341d13851360e8a3f69476b17ce271b62f7dcad442d7870296c122 datapathConfiguration="&{false false false false false }" interface=lxc313a09f1bf5f k8sPodName=monitoring/vector-7hxc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abc55e60e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-7hxc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abc55e60e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-7hxc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abc55e60e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identity=33758 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-7hxc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abc55e60e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identity=33758 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-7hxc9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=abc55e60e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2917 identity=33758 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-7hxc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abc55e60e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2917 identity=33758 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/vector-7hxc9 subsys=daemon level=info msg="Delete endpoint request" containerID=aa276ad2bd endpointID=2814 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aa276ad2bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2814 identity=60412 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51b158cb-6ac3-4689-96ef-322e342e7639 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 c92455a4-987c-4dc2-b23d-a9326f8c07e9 default }" containerID=c3a4eb8c97f4627255aa9808c6879d5275c20cd14e9e2cf7575a86af1b6b0ee7 datapathConfiguration="&{false false false false false }" interface=lxc2af44d7176ef k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3a4eb8c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3a4eb8c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3a4eb8c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=4300 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3a4eb8c97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=4300 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3a4eb8c97 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=108 identity=4300 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3a4eb8c97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=108 identity=4300 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 965a7078-ca36-474a-834e-9d90296b8fb3 default }" containerID=8753cc7a8caf822816db3fb2cc8dcba1c1cc6d5c562d67d050c24c9a357cc833 datapathConfiguration="&{false false false false false }" interface=lxc63e55104b378 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8753cc7a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8753cc7a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8753cc7a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8753cc7a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=55063 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8753cc7a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=55063 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8753cc7a8c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3527 identity=55063 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=8753cc7a8c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3527 identity=55063 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-mtd6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 3fa3b2f4-d2ee-4e5b-9740-964331d44162 default }" containerID=b609b1293e5397ccb3c497c46b2649f3502521b3cc4a0fb0d5fe655f7e2c89ed datapathConfiguration="&{false false false false false }" interface=lxc2747504c8ee7 k8sPodName=openstack/memcached-memcached-6479589586-68zfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b609b1293e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-68zfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b609b1293e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-68zfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b609b1293e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=51307 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-68zfl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b609b1293e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=51307 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-68zfl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b609b1293e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1724 identity=51307 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-68zfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b609b1293e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1724 identity=51307 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-68zfl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 40d9a7ac-2af0-4a4f-8bdc-4b8c1c374e8d default }" containerID=12f3e83c3f5afa0fa0d49ce5ea41edd20d36c01cb5deb5d31b317fb4ddd0279d datapathConfiguration="&{false false false false false }" interface=lxc72826d559754 k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12f3e83c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12f3e83c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12f3e83c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=60412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12f3e83c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=60412 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12f3e83c3f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=239 identity=60412 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12f3e83c3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=239 identity=60412 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 subsys=daemon level=info msg="Delete endpoint request" containerID=12f3e83c3f endpointID=239 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=12f3e83c3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=239 identity=60412 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0cecabab-80e9-4baf-b9d0-b876f88a96c4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 2d575421-06b3-45c1-a336-2e16b3f7435f default }" containerID=edf2ab64fe5462c2c333218450b494d98f68fd05adbe3728222728aed38a2a0b datapathConfiguration="&{false false false false false }" interface=lxc39b646458517 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edf2ab64fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edf2ab64fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edf2ab64fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=12135 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edf2ab64fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=12135 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edf2ab64fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=53 identity=12135 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edf2ab64fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=53 identity=12135 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 d8756855-ea43-4d6d-81c9-7291a1ddcee9 default }" containerID=ecfdda2b26816706ac695223e4cc53041fa712c3e0173a1d72faf060e2abf314 datapathConfiguration="&{false false false false false }" interface=lxcad1d86f4c5ab k8sPodName=openstack/keystone-api-7c9799b6cb-757x5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecfdda2b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-api-7c9799b6cb-757x5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecfdda2b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-api-7c9799b6cb-757x5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecfdda2b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identity=15707 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-api-7c9799b6cb-757x5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecfdda2b26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4051 identity=15707 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-api-7c9799b6cb-757x5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 9773ae97-5409-4d71-baa5-5a1a5fce303e default }" containerID=45661b0359e651880e4a90bead88a168a0a53ae725ce7fa1a413298f9fe09608 datapathConfiguration="&{false false false false false }" interface=lxc55162ae95ba7 k8sPodName=openstack/keystone-credential-setup-8zjjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45661b0359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-8zjjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45661b0359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-8zjjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45661b0359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 identity=51351 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-8zjjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45661b0359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3838 identity=51351 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-8zjjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecfdda2b26 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4051 identity=15707 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-api-7c9799b6cb-757x5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecfdda2b26 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4051 identity=15707 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-api-7c9799b6cb-757x5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=45661b0359 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3838 identity=51351 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-8zjjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=45661b0359 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3838 identity=51351 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-8zjjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45661b0359 endpointID=3838 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8zjjt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=bb45fc17-ebac-4dd5-9fca-1a59d3b586cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=45661b0359 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3838 identity=51351 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-credential-setup-8zjjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 a6edb8b4-681c-4f0f-9a71-0b70a5eb2d1e default }" containerID=9eaeaa197c85f700b1289e0e432620cd988114e642a21286a71f42dd5ee130f2 datapathConfiguration="&{false false false false false }" interface=lxc67cdec153f46 k8sPodName=openstack/keystone-db-init-b95p7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9eaeaa197c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-b95p7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9eaeaa197c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-b95p7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9eaeaa197c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identity=3753 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-b95p7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9eaeaa197c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2628 identity=3753 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-b95p7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9eaeaa197c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2628 identity=3753 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-b95p7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9eaeaa197c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2628 identity=3753 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-b95p7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9eaeaa197c endpointID=2628 k8sNamespace=openstack k8sPodName=keystone-db-init-b95p7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=1038acb9-346a-467b-860c-4c1c14f054aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9eaeaa197c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2628 identity=3753 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-init-b95p7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 48b57376-221d-4f43-a4d3-72db97c469aa default }" containerID=e27036b677bdc4fd0cc4488324a38b641a8b5d39cb5d26d91a57a771ba259f75 datapathConfiguration="&{false false false false false }" interface=lxc3683c30f3382 k8sPodName=openstack/keystone-fernet-setup-mt2bk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e27036b677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e27036b677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e27036b677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e27036b677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identity=23041 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e27036b677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1130 identity=23041 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e27036b677 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1130 identity=23041 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e27036b677 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1130 identity=23041 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e27036b677 endpointID=1130 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mt2bk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8c6d37e1-bf1b-4f31-8786-c171bb494bc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e27036b677 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1130 identity=23041 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-fernet-setup-mt2bk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 98d4b13c-f4a0-4a0e-adff-9c0cf7eeb68e default }" containerID=ecacef7d6f3dee1c8b166c1da4638ebbfa9a0d745f2e00872b38caad6a885362 datapathConfiguration="&{false false false false false }" interface=lxceae49fb04aeb k8sPodName=openstack/keystone-db-sync-52cwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecacef7d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-db-sync-52cwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecacef7d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-db-sync-52cwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ecacef7d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=11507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-db-sync-52cwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecacef7d6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=11507 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-db-sync-52cwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecacef7d6f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=34 identity=11507 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-db-sync-52cwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecacef7d6f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=34 identity=11507 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-db-sync-52cwp subsys=daemon level=info msg="Delete endpoint request" containerID=ecacef7d6f endpointID=34 k8sNamespace=openstack k8sPodName=keystone-db-sync-52cwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=6ad3e5c9-624a-474d-9150-0b023d2ef066 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ecacef7d6f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=34 identity=11507 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-db-sync-52cwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 2dd31ec3-acbd-4e54-97e0-d42950ef1f36 default }" containerID=40f064240d4066f025fe57eb98b76f3adc5e5f415cfd91d42f81175e3b37cf2e datapathConfiguration="&{false false false false false }" interface=lxc000af9de434e k8sPodName=openstack/keystone-rabbit-init-6n5t2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40f064240d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40f064240d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40f064240d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40f064240d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=13917 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40f064240d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=13917 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40f064240d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=941 identity=13917 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40f064240d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=941 identity=13917 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40f064240d endpointID=941 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6n5t2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e1167711-e6cb-423b-aae7-649c7acc6fb7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=40f064240d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=941 identity=13917 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-rabbit-init-6n5t2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 5f950008-4c2a-44d4-bf1b-4195dd93f4db default }" containerID=10710b690abd855d73797f5f56ab9858a22bb7d5452cec0e2e27364a6bdbe776 datapathConfiguration="&{false false false false false }" interface=lxc8a70bf1eb49f k8sPodName=openstack/keystone-domain-manage-9x87r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10710b690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-domain-manage-9x87r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10710b690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-domain-manage-9x87r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10710b690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identity=41300 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-domain-manage-9x87r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10710b690a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1661 identity=41300 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-domain-manage-9x87r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10710b690a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1661 identity=41300 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-domain-manage-9x87r subsys=endpoint level=info msg="Successful endpoint creation" containerID=10710b690a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1661 identity=41300 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-domain-manage-9x87r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10710b690a endpointID=1661 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9x87r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=0cb552ef-15f4-42bc-9d22-5a16e9f4ec9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=10710b690a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1661 identity=41300 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-domain-manage-9x87r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 aed38209-c450-4a4e-bd17-f44bbf8e10e0 default }" containerID=7469ce6b1e5da34a43a14ab7c723214964dc1de05c7cc2a05b5074397961477b datapathConfiguration="&{false false false false false }" interface=lxc4a942738a144 k8sPodName=openstack/keystone-bootstrap-f8kqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7469ce6b1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7469ce6b1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7469ce6b1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7469ce6b1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=40602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7469ce6b1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=40602 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7469ce6b1e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=167 identity=40602 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7469ce6b1e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=167 identity=40602 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7469ce6b1e endpointID=167 k8sNamespace=openstack k8sPodName=keystone-bootstrap-f8kqv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=afe840ae-bc80-44e7-8c54-cada6576eb97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7469ce6b1e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=167 identity=40602 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-f8kqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 8410bf1f-19d1-4ca0-a317-2981985c363c default }" containerID=6036badb3a560ba580f58093217da197d7c26ad5afe2bfa3150fa6897489c84d datapathConfiguration="&{false false false false false }" interface=lxc485e0fa38922 k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6036badb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6036badb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6036badb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=60412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6036badb3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=60412 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6036badb3a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=135 identity=60412 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff subsys=endpoint level=info msg="Successful endpoint creation" containerID=6036badb3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=135 identity=60412 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff subsys=daemon level=info msg="Delete endpoint request" containerID=6036badb3a endpointID=135 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6036badb3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=135 identity=60412 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31577ee6-3ed9-496a-88ea-30396b080fff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 8a1f18f1-4036-4afa-a281-a5c78df62ed6 default }" containerID=b08518cbbf6c09038c039b8aad45615f5002b398150216bebb5543c5202f1c2d datapathConfiguration="&{false false false false false }" interface=lxcb43cedcfc5a9 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b08518cbbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b08518cbbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b08518cbbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=43401 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b08518cbbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=43401 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b08518cbbf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1151 identity=43401 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b08518cbbf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1151 identity=43401 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 af004cf5-d44d-486d-b53a-5e69b476e4bd default }" containerID=07ec656187aef7f319192a2d526e655d1a9ef9ace7e90c1a7434093cc8a8ad07 datapathConfiguration="&{false false false false false }" interface=lxcb038f031b1d4 k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07ec656187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07ec656187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=07ec656187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07ec656187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=7565 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07ec656187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=961 identity=7565 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 fac06a60-ee6f-4e60-b917-17ec48170755 default }" containerID=3194c49e8e7ffedbdb89a0bab72b6069b8e021e51bfd8f67be4d3946d94cdb2b datapathConfiguration="&{false false false false false }" interface=lxca1caf8b47567 k8sPodName=openstack/barbican-db-init-64vp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3194c49e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-db-init-64vp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3194c49e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-db-init-64vp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3194c49e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identity=51997 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-db-init-64vp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3194c49e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identity=51997 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-db-init-64vp4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07ec656187 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=961 identity=7565 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=07ec656187 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=961 identity=7565 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-api-59884bb4c9-2kqrt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3194c49e8e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1493 identity=51997 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-db-init-64vp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3194c49e8e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1493 identity=51997 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-db-init-64vp4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3194c49e8e endpointID=1493 k8sNamespace=openstack k8sPodName=barbican-db-init-64vp4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=cec35f32-e521-4464-950a-bd129b8d84b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3194c49e8e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1493 identity=51997 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/barbican-db-init-64vp4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 d9b36729-2c10-429f-9984-0d7170fa0fd7 default }" containerID=664f7df9a248e89014755934ee5104cc826bcb3c74fdbdde31ad41852e7a3767 datapathConfiguration="&{false false false false false }" interface=lxc458596f16512 k8sPodName=openstack/barbican-db-sync-jn6fh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=664f7df9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-jn6fh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=664f7df9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-jn6fh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=664f7df9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=12163 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-jn6fh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=664f7df9a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3535 identity=12163 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-jn6fh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=664f7df9a2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3535 identity=12163 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-jn6fh subsys=endpoint level=info msg="Successful endpoint creation" containerID=664f7df9a2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3535 identity=12163 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-jn6fh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03571766742867964 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=664f7df9a2 endpointID=3535 k8sNamespace=openstack k8sPodName=barbican-db-sync-jn6fh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=52cf26b7-8ca2-4e40-9bcc-e4060942846c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=664f7df9a2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3535 identity=12163 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-jn6fh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 ba4d8988-116b-4a0f-bed5-6428d5714a44 default }" containerID=62bf391eb97f1390c4db408444cbdaa7bd19bf1704c11cf7c76931888b4f13da datapathConfiguration="&{false false false false false }" interface=lxc2bad08cb4adb k8sPodName=openstack/barbican-rabbit-init-bk99x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62bf391eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62bf391eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=62bf391eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62bf391eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=48351 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62bf391eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=48351 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62bf391eb9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=572 identity=48351 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x subsys=endpoint level=info msg="Successful endpoint creation" containerID=62bf391eb9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=572 identity=48351 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62bf391eb9 endpointID=572 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-bk99x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ee9e7b1c-13bb-4146-8560-06925459b192 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=62bf391eb9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=572 identity=48351 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/barbican-rabbit-init-bk99x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 7df3c088-5dda-437a-a033-814d3076d62e default }" containerID=42784cbfe7a1ed6ce6a21c97108839dad9ff44e4e5a42ba5c11ebc8d0b208e11 datapathConfiguration="&{false false false false false }" interface=lxcfedd9007096c k8sPodName=openstack/barbican-ks-service-f4wxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42784cbfe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-service-f4wxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42784cbfe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-service-f4wxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42784cbfe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identity=57256 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-service-f4wxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42784cbfe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3160 identity=57256 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-service-f4wxj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=42784cbfe7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3160 identity=57256 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-service-f4wxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=42784cbfe7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3160 identity=57256 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-service-f4wxj subsys=daemon level=info msg="Delete endpoint request" containerID=42784cbfe7 endpointID=3160 k8sNamespace=openstack k8sPodName=barbican-ks-service-f4wxj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5a0b2004-d674-4be4-85b8-f652df72564c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=42784cbfe7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3160 identity=57256 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-service-f4wxj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 c06d3eb1-78db-4028-a8ee-b5f88893e8dd default }" containerID=fdd5e07e98ed61a2a04ed4946c9bf1fe54f9192a43a72653c555bbd5c06d19d3 datapathConfiguration="&{false false false false false }" interface=lxc0a08282ee984 k8sPodName=openstack/barbican-ks-endpoints-jcz95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdd5e07e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdd5e07e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fdd5e07e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdd5e07e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=35888 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdd5e07e98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2823 identity=35888 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdd5e07e98 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2823 identity=35888 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdd5e07e98 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2823 identity=35888 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdd5e07e98 endpointID=2823 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-jcz95 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1a1a2ee4-63a4-4aa9-8565-79c66c846de9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fdd5e07e98 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2823 identity=35888 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/barbican-ks-endpoints-jcz95 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 f0a5fb3a-7281-4bfa-b1cf-fe02a5df0635 default }" containerID=4530bce974f2ffb9bd99e1d210640013970cdbe41bcdef5c1c4b70a29eab0d0a datapathConfiguration="&{false false false false false }" interface=lxc805368d983c1 k8sPodName=openstack/barbican-ks-user-dqt48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4530bce974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-dqt48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4530bce974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-dqt48 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4530bce974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=9056 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-dqt48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4530bce974 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=9056 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-dqt48 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4530bce974 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3690 identity=9056 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-dqt48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4530bce974 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3690 identity=9056 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-dqt48 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4530bce974 endpointID=3690 k8sNamespace=openstack k8sPodName=barbican-ks-user-dqt48 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=4c1de4c5-0361-4a14-9c25-26b7ebb6d863 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4530bce974 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3690 identity=9056 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/barbican-ks-user-dqt48 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.168 8da133c1-5217-4b8c-b281-213d4c038159 default }" containerID=33e252e396f49d5fd1e7ae9b47cdbb86a73c4b9b03bcf81e85770dfd76c0f9f7 datapathConfiguration="&{false false false false false }" interface=lxc8e9bc1f630cf k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33e252e396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 ipv4=10.0.0.168 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33e252e396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.168 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=33e252e396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=33e252e396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=9801 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.168 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33e252e396 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3253 identity=9801 ipv4=10.0.0.168 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33e252e396 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3253 identity=9801 ipv4=10.0.0.168 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws subsys=endpoint level=info msg="Successful endpoint creation" containerID=33e252e396 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3253 identity=9801 ipv4=10.0.0.168 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-zn7ws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 6cd6ceb0-441e-4343-ba1d-5b6a6d7cf4e8 default }" containerID=eb809f5a4164abbf11c0565cbea5c3d3d9935b2fd9fdc3ce74da346ae0735ceb datapathConfiguration="&{false false false false false }" interface=lxc089e25e0e366 k8sPodName=openstack/rook-ceph-detect-version-x2ngl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb809f5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x2ngl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb809f5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x2ngl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb809f5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=11857 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x2ngl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb809f5a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=11857 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x2ngl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eb809f5a41 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=238 identity=11857 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x2ngl subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb809f5a41 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=238 identity=11857 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x2ngl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb809f5a41 endpointID=238 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-x2ngl subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b0aff0b2-b4cd-4210-b8c3-8fa7270897a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=eb809f5a41 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=238 identity=11857 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x2ngl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 f8aae5b6-5669-40b9-981c-58455d021bc5 default }" containerID=6743d5267d2f68742c42d233990c676229b054e2a8ea01531424b449729fe294 datapathConfiguration="&{false false false false false }" interface=lxcbc76dcd40247 k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6743d5267d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6743d5267d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6743d5267d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identity=60412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6743d5267d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identity=60412 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6743d5267d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=669 identity=60412 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6743d5267d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=669 identity=60412 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.105 816a4645-c6e9-47e2-9de3-7c9fe3b66615 default }" containerID=916b64be6fe1cf59d03d107b9eb6bb4759dad92cc007453790b7ed07d2f25657 datapathConfiguration="&{false false false false false }" interface=lxc386b1570e43f k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=916b64be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=916b64be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=916b64be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=54804 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=916b64be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=54804 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=916b64be6f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3578 identity=54804 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=916b64be6f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3578 identity=54804 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=916b64be6f endpointID=3578 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-tbhv5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=5f991df9-e836-462f-86dd-f7cd91eef088 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Delete endpoint request" containerID=6743d5267d endpointID=669 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=916b64be6f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3578 identity=54804 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-tbhv5 subsys=endpoint level=info msg="Removed endpoint" containerID=6743d5267d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=669 identity=60412 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e75fb265-ef8c-4b9d-a425-5c9887f58993 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 5f8c566b-1cdc-41db-b0d4-8c0b497d314a default }" containerID=e0bd205cd5383d25228fbd85f0d0de48d59bfe025f4c825ea84c7394a6b8ed24 datapathConfiguration="&{false false false false false }" interface=lxcacce4f87bf29 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0bd205cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0bd205cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0bd205cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identity=368 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0bd205cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=963 identity=368 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e0bd205cd5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=963 identity=368 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0bd205cd5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=963 identity=368 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 c51b6d30-c94b-4ccb-8eb1-f8d579495cef default }" containerID=63f45faba5897ec793c81b57f85d12d2e0f59f7c5a9c7bb4ebf62e7a796150b7 datapathConfiguration="&{false false false false false }" interface=lxc47db69e252c5 k8sPodName=openstack/glance-db-init-cqhzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63f45faba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63f45faba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63f45faba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63f45faba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=47558 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63f45faba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=47558 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63f45faba5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=502 identity=47558 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=63f45faba5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=47558 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63f45faba5 endpointID=502 k8sNamespace=openstack k8sPodName=glance-db-init-cqhzk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=049394e1-d113-49a1-af13-aa31a50de7e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=63f45faba5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=47558 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-db-init-cqhzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 09376cf8-2f4b-4159-8630-bf6d7e4f5d07 default }" containerID=40d88e0744fbc9ddbec7a969093fbb258be6d60b88b5bdfaa43de56d21fd4f24 datapathConfiguration="&{false false false false false }" interface=lxc5464006d74a0 k8sPodName=openstack/glance-db-sync-pbfrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40d88e0744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40d88e0744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40d88e0744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40d88e0744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=63316 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40d88e0744 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=63316 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40d88e0744 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=200 identity=63316 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=40d88e0744 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=200 identity=63316 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40d88e0744 endpointID=200 k8sNamespace=openstack k8sPodName=glance-db-sync-pbfrd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c64a2fd9-63f6-465d-a895-74c0e1e7c363 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=40d88e0744 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=200 identity=63316 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-sync-pbfrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 9fd653f7-a1bc-4cd2-beed-af027108baac default }" containerID=e1c19216a4f23de45cc1964b95b31d769c339eb12d41bba7e4480dd9543f6ea2 datapathConfiguration="&{false false false false false }" interface=lxc5b55f1c97345 k8sPodName=openstack/glance-rabbit-init-pgbj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1c19216a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-pgbj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1c19216a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-pgbj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e1c19216a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=14345 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-pgbj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1c19216a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=14345 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-pgbj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1c19216a4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1366 identity=14345 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-pgbj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1c19216a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1366 identity=14345 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-pgbj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1c19216a4 endpointID=1366 k8sNamespace=openstack k8sPodName=glance-rabbit-init-pgbj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a19b721c-9b0e-4d05-a434-aa2f356627cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e1c19216a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1366 identity=14345 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-rabbit-init-pgbj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 dd553957-2d07-44cb-99a2-09652bd713d2 default }" containerID=4673fc9d61face90aa0768f97b5072a478313505f93d05ba55e186bdfe712828 datapathConfiguration="&{false false false false false }" interface=lxce41098f3687a k8sPodName=openstack/glance-ks-service-vn49w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4673fc9d61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-ks-service-vn49w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4673fc9d61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-ks-service-vn49w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4673fc9d61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=7899 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-ks-service-vn49w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4673fc9d61 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=254 identity=7899 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-ks-service-vn49w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4673fc9d61 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=254 identity=7899 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-ks-service-vn49w subsys=endpoint level=info msg="Successful endpoint creation" containerID=4673fc9d61 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=254 identity=7899 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-ks-service-vn49w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.224 fb3f8f14-921b-4d6d-9c9e-c4b6a51857d5 default }" containerID=10a6c44006d3799af1e743619d7541d4f98c7db40d350039c794ccae6fbd42af datapathConfiguration="&{false false false false false }" interface=lxc3dd921bc7629 k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-4rpwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10a6c44006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-4rpwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10a6c44006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-4rpwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10a6c44006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=17785 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-4rpwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10a6c44006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=17785 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-4rpwg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 052ff790-e218-420f-aeaa-5b4244a3a95c default }" containerID=62814b5421a644a5dc1fad19705bbde977c8e161b32e8efb2fded809bab2a3b2 datapathConfiguration="&{false false false false false }" interface=lxc0bb07b73dcac k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-8hqbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62814b5421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-8hqbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62814b5421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-8hqbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62814b5421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=7546 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-8hqbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62814b5421 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=7546 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-8hqbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10a6c44006 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=251 identity=17785 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-4rpwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=10a6c44006 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=251 identity=17785 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-4rpwg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=62814b5421 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2206 identity=7546 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-8hqbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=62814b5421 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2206 identity=7546 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-8hqbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4673fc9d61 endpointID=254 k8sNamespace=openstack k8sPodName=glance-ks-service-vn49w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=0fdf3f8d-0021-44e7-aa5a-4fff183c0de6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4673fc9d61 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=254 identity=7899 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-ks-service-vn49w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 a1729d83-3aa0-49f0-929e-61c9cfccfb4f default }" containerID=f2b8b6a1a4c645b6fc4b92829256f422c11f463b0349636849aba79ffae00d06 datapathConfiguration="&{false false false false false }" interface=lxca8fa3f4e3555 k8sPodName=openstack/glance-ks-endpoints-xm5rc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2b8b6a1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-endpoints-xm5rc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2b8b6a1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=63a06f7f-6833-4107-be05-6697500d16f7,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=63a06f7f-6833-4107-be05-6697500d16f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-endpoints-xm5rc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=63a06f7f-6833-4107-be05-6697500d16f7;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=63a06f7f-6833-4107-be05-6697500d16f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2b8b6a1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 identity=35794 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=63a06f7f-6833-4107-be05-6697500d16f7,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=63a06f7f-6833-4107-be05-6697500d16f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-endpoints-xm5rc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2b8b6a1a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1325 identity=35794 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-endpoints-xm5rc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f2b8b6a1a4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1325 identity=35794 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-endpoints-xm5rc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2b8b6a1a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1325 identity=35794 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-endpoints-xm5rc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.56 c067c2db-e325-4976-8864-a5f12a5643ac default }" containerID=62d5f65f3572374b9e2970f01680df8ad71c0139ed5fa70e961393692aa80a57 datapathConfiguration="&{false false false false false }" interface=lxc6c0e86f6eb37 k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62d5f65f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62d5f65f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d510d437-143b-4c43-809d-46f94bb3991d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d510d437-143b-4c43-809d-46f94bb3991d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=62d5f65f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d510d437-143b-4c43-809d-46f94bb3991d;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d510d437-143b-4c43-809d-46f94bb3991d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62d5f65f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 identity=57812 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d510d437-143b-4c43-809d-46f94bb3991d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d510d437-143b-4c43-809d-46f94bb3991d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62d5f65f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4094 identity=57812 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 subsys=endpoint level=info msg="Delete endpoint request" containerID=f2b8b6a1a4 endpointID=1325 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xm5rc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=63a06f7f-6833-4107-be05-6697500d16f7 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=63a06f7f-6833-4107-be05-6697500d16f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Rewrote endpoint BPF program" containerID=62d5f65f35 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4094 identity=57812 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62d5f65f35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4094 identity=57812 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 subsys=daemon level=info msg="Removed endpoint" containerID=f2b8b6a1a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1325 identity=35794 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-ks-endpoints-xm5rc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 90a5e1e5-87c6-4297-93fe-28cbf2bf03da default }" containerID=032fae79daaf12b6aa5f2b865114dea0643db313da21c02898ee481c4a69bf4f datapathConfiguration="&{false false false false false }" interface=lxccfb075b2d892 k8sPodName=openstack/glance-ks-user-489mx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=032fae79da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-user-489mx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=032fae79da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-user-489mx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=032fae79da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=55638 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-user-489mx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=032fae79da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=55638 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-user-489mx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=032fae79da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3601 identity=55638 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-user-489mx subsys=endpoint level=info msg="Successful endpoint creation" containerID=032fae79da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3601 identity=55638 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-user-489mx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62d5f65f35 endpointID=4094 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-wlcm8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d510d437-143b-4c43-809d-46f94bb3991d k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d510d437-143b-4c43-809d-46f94bb3991d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=62d5f65f35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4094 identity=57812 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wlcm8 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=032fae79da endpointID=3601 k8sNamespace=openstack k8sPodName=glance-ks-user-489mx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=5757eeb2-205a-4a6c-a8e6-a9c452e8f1ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=032fae79da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3601 identity=55638 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-user-489mx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 bf0c8cd7-ee13-4066-9199-3cf198efe055 default }" containerID=e6cd2f708cc8cf42458daa0dd1d9686af0551ff5642eedb94f48ea8ae35b7c86 datapathConfiguration="&{false false false false false }" interface=lxcef200b24563c k8sPodName=openstack/glance-metadefs-load-l97kv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6cd2f708c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-l97kv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6cd2f708c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=889018d5-5f61-417a-a677-28f455cb6648,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=889018d5-5f61-417a-a677-28f455cb6648,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-l97kv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=889018d5-5f61-417a-a677-28f455cb6648;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=889018d5-5f61-417a-a677-28f455cb6648;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6cd2f708c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=58916 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=889018d5-5f61-417a-a677-28f455cb6648,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=889018d5-5f61-417a-a677-28f455cb6648,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-l97kv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6cd2f708c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=58916 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-l97kv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6cd2f708c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=646 identity=58916 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-l97kv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6cd2f708c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=646 identity=58916 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-l97kv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e6cd2f708c endpointID=646 k8sNamespace=openstack k8sPodName=glance-metadefs-load-l97kv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=889018d5-5f61-417a-a677-28f455cb6648 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=889018d5-5f61-417a-a677-28f455cb6648 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e6cd2f708c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=646 identity=58916 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-l97kv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 f92975b7-529d-49bb-ba2b-38518915477d default }" containerID=7ef0bcbd7ba7754551e559f916f976103d8cb7ffd7bcda6ec16b826c53f4cd79 datapathConfiguration="&{false false false false false }" interface=lxc6f7435a897fe k8sPodName=openstack/glance-storage-init-t8r4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ef0bcbd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-storage-init-t8r4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ef0bcbd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-storage-init-t8r4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ef0bcbd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=15930 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-storage-init-t8r4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ef0bcbd7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=15930 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-storage-init-t8r4b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ef0bcbd7b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=213 identity=15930 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-storage-init-t8r4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ef0bcbd7b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=213 identity=15930 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-storage-init-t8r4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ef0bcbd7b endpointID=213 k8sNamespace=openstack k8sPodName=glance-storage-init-t8r4b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=f892d713-3a33-4968-b0a3-bb5e1de53c6f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7ef0bcbd7b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=213 identity=15930 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/glance-storage-init-t8r4b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 76f45a3a-c4af-4f4a-b516-f1d4065426e7 default }" containerID=e2a4eac3d411aa62a0e0b065c527983223dfb20804f9f5c0294b671e5d2ef1f5 datapathConfiguration="&{false false false false false }" interface=lxc36244e877af9 k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2a4eac3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2a4eac3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e2a4eac3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2a4eac3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=25142 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2a4eac3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=25142 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2a4eac3d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=125 identity=25142 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2a4eac3d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=125 identity=25142 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-api-5f8f74bb7f-kgr5k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 f69fd8ea-b6f5-4edd-a299-420dc326ad93 default }" containerID=8ec0d767b362835a7901cde67b826a1aff1dde438e820cce9e9bf923fab37ae8 datapathConfiguration="&{false false false false false }" interface=lxc423e02c73d62 k8sPodName=openstack/staffeln-api-78f7d7f76d-rvpw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ec0d767b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-api-78f7d7f76d-rvpw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ec0d767b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-api-78f7d7f76d-rvpw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ec0d767b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identity=4746 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-api-78f7d7f76d-rvpw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ec0d767b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identity=4746 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-api-78f7d7f76d-rvpw2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.233 a6eb04a7-3cbe-47b7-9d58-71ef6483aab2 default }" containerID=08b263a44859eaad39fa4676fbe7cbbc25436fc6039261b8157cab6026faa3e6 datapathConfiguration="&{false false false false false }" interface=lxc0ee3aed72ff3 k8sPodName=openstack/staffeln-db-init-mnm4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08b263a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-init-mnm4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08b263a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-init-mnm4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08b263a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=53178 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-init-mnm4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08b263a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=53178 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-init-mnm4v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ec0d767b3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4078 identity=4746 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-api-78f7d7f76d-rvpw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ec0d767b3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4078 identity=4746 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-api-78f7d7f76d-rvpw2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=08b263a448 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=487 identity=53178 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-init-mnm4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=08b263a448 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=487 identity=53178 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-init-mnm4v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 7a5e336b-e375-4136-a729-1cf51e7be2e9 default }" containerID=dc37e23aec431de4e7b13fd4e35ece842833fb830e848092a2782c92a0c06735 datapathConfiguration="&{false false false false false }" interface=lxc9763d9e68743 k8sPodName=openstack/staffeln-conductor-545cc8559f-lx8dz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc37e23aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3188 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-conductor-545cc8559f-lx8dz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc37e23aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3188 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-conductor-545cc8559f-lx8dz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc37e23aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3188 identity=63358 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-conductor-545cc8559f-lx8dz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc37e23aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3188 identity=63358 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-conductor-545cc8559f-lx8dz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc37e23aec datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3188 identity=63358 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-conductor-545cc8559f-lx8dz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc37e23aec datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3188 identity=63358 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/staffeln-conductor-545cc8559f-lx8dz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08b263a448 endpointID=487 k8sNamespace=openstack k8sPodName=staffeln-db-init-mnm4v subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=aa1a960c-f700-440c-af73-b1c0851459fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=08b263a448 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=487 identity=53178 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-init-mnm4v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 f709e8f1-20ef-491c-9520-785ea90a03c6 default }" containerID=b61604f50a32d0e018ba1c59c7b8814aa1a50c0c14cfa98804c869aaa0ee3b52 datapathConfiguration="&{false false false false false }" interface=lxcccad22d5b1a0 k8sPodName=openstack/staffeln-db-sync-zjqvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b61604f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-sync-zjqvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b61604f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c1b106c8-5745-4c23-afc3-bc3400980ddd,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c1b106c8-5745-4c23-afc3-bc3400980ddd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-sync-zjqvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c1b106c8-5745-4c23-afc3-bc3400980ddd;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c1b106c8-5745-4c23-afc3-bc3400980ddd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b61604f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=42446 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c1b106c8-5745-4c23-afc3-bc3400980ddd,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c1b106c8-5745-4c23-afc3-bc3400980ddd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-sync-zjqvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b61604f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=42446 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-sync-zjqvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b61604f50a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=901 identity=42446 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-sync-zjqvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b61604f50a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=901 identity=42446 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-sync-zjqvw subsys=daemon