level=info msg="Memory available for map entries (0.003% of 67421626368B): 168554065B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="819.094µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="54.121µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="785.825µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="3.94µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=90.859951ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.17µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.15µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="64.271µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="68.072µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="79.851µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="421.387µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.97µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.84428ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.066815ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="87.823µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="78.942µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="274.424µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="155.912µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="126.202µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.501074ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="112.032µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="60.741µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.21186ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.467808ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="8.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.183705ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="11.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="9.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.371µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="20.59µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.251µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="49.941µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="360.977µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.98µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="274.854µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="891.686µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.207752ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.97µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.01µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.61" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.61}] 10.0.0.0/24 [] [] 10.0.0.81 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34629" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.405728698s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="26.86µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="11.841µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="35.611µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="5.13µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.45730835s subsys=daemon level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Create endpoint request" addressing="&{10.0.0.214 bc0c1a5e-874b-48f2-a5ac-e9c1279de91d default }" containerID=fa20b087ee0d8cb8b08fac00af1c4b276915252a7fea09f6b37cd08a8843ce14 datapathConfiguration="&{false false false false false }" interface=lxc9c4eb6ae2098 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa20b087ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa20b087ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=fa20b087ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fa20b087ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 identity=8123 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa20b087ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3951 identity=8123 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 e19a9fa4-d58e-4084-b6cd-cb18148ad9a9 default }" containerID=c6c21979a1d10e4ee6690db41c305759629daa3353473e76c56a3b7c0182077d datapathConfiguration="&{false false false false false }" interface=lxcef34a9583c3d k8sPodName=kube-system/coredns-7c96b6546b-l9f79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6c21979a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l9f79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6c21979a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l9f79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6c21979a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=19100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l9f79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6c21979a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=384 identity=19100 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l9f79 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=300.181715ms file-path=/var/run/cilium/state/templates/3e9c3c60cc999beb2ad2adc1148c9c4696f8be312be09b9c5331a151b9bd655d/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1806 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.81 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="reserved:health" ipv4=10.0.0.81 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=4 identityLabels="reserved:health" ipv4=10.0.0.81 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.071688973s file-path=/var/run/cilium/state/templates/77c90638f2debd059f375bbc7e60ca4979176a98fb3b3a4633e81135a135f609/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=235 identity=4 ipv4=10.0.0.81 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa20b087ee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3951 identity=8123 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6c21979a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=384 identity=19100 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l9f79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa20b087ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3951 identity=8123 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp subsys=daemon level=info msg="Successful endpoint creation" containerID=c6c21979a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=384 identity=19100 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l9f79 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa20b087ee endpointID=3951 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-rg4qp subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=d3268948-1dee-4ed0-9c55-a88b710bdc98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=fa20b087ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3951 identity=8123 ipv4=10.0.0.214 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rg4qp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 a49a66ae-03b3-4a39-8177-68a7df0f8f7c default }" containerID=7841ef7496af47da57d3917167e5e5f22bbe4c7d7ddeac6586eb0103edb766b4 datapathConfiguration="&{false false false false false }" interface=lxcdb1e740ced49 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7841ef7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7841ef7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7841ef7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7841ef7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 identity=19970 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7841ef7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 identity=19970 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7841ef7496 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3210 identity=19970 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7841ef7496 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3210 identity=19970 ipv4=10.0.0.102 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hbbp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1806 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01806 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01806 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01806 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01806:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1806 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 185c1929-e87f-4134-bb34-a3b364064a4a default }" containerID=01825aae1f95f0097ee5c109cac443d4c1803dc6934dc43c84457caac9f85799 datapathConfiguration="&{false false false false false }" interface=lxcf3e91c7b8e18 k8sPodName=kube-system/coredns-67659f764b-4jxvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01825aae1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jxvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01825aae1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jxvw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=01825aae1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=19100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jxvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01825aae1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=19100 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jxvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 ee24ec73-5039-4936-ac0a-8a291d1d72fa default }" containerID=c9f2892eef1f7b355cb66a316295475a2c896bf4a3d8af53199d9b97c61cabc3 datapathConfiguration="&{false false false false false }" interface=lxcb790d4de718e k8sPodName=kube-system/coredns-67659f764b-n2b5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9f2892eef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-n2b5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9f2892eef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-n2b5t subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c9f2892eef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=19100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-n2b5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9f2892eef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=19100 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-n2b5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01825aae1f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=218 identity=19100 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jxvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=01825aae1f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=218 identity=19100 ipv4=10.0.0.196 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jxvw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c9f2892eef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=152 identity=19100 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-n2b5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9f2892eef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=152 identity=19100 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-n2b5t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 6d796ece-9586-4c50-8913-289eb4df8052 default }" containerID=14c409c15406a98d90ea3965f72f9dd560cdf9d2c91ff3554eb4614d920ed50b datapathConfiguration="&{false false false false false }" interface=lxc11db468707d2 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-svbvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14c409c154 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-svbvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14c409c154 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-svbvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14c409c154 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=21532 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-svbvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14c409c154 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=21532 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-svbvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=14c409c154 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=872 identity=21532 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-svbvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=14c409c154 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=872 identity=21532 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-svbvw subsys=daemon level=info msg="Delete endpoint request" containerID=c6c21979a1 endpointID=384 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-l9f79 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c6c21979a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=384 identity=19100 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-l9f79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 04187a17-4c22-422a-9fe0-c9a32a03d420 default }" containerID=8ee1bfefb6ca238595c88422365c1358012756ec2bdf2f7a877169f6fb75b81e datapathConfiguration="&{false false false false false }" interface=lxc346812583b9d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ftbnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ee1bfefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ftbnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ee1bfefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ftbnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ee1bfefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 identity=31071 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ftbnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ee1bfefb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4030 identity=31071 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ftbnx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ee1bfefb6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4030 identity=31071 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ftbnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ee1bfefb6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4030 identity=31071 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ftbnx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 51d33703-0abf-4087-b138-8db62e12fc91 default }" containerID=ccd93124235fe4b450880b7bc947984e4c622e049a57ee86238b3fbff84ccb0a datapathConfiguration="&{false false false false false }" interface=lxc30a1ac4dcbb2 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pkzgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccd9312423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pkzgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccd9312423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pkzgj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 8dead617-4c65-44fc-a4c2-c3e0fd5e4517 default }" containerID=f007799a17de37a754c5dbc8ec1d8bdee0862ced1c659995ca102ded1958c1b6 datapathConfiguration="&{false false false false false }" interface=lxc6fe1136b4a96 k8sPodName=cert-manager/cert-manager-75c4c745bc-6rs92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f007799a17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6rs92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=f007799a17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6rs92 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccd9312423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=1964 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pkzgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccd9312423 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=1964 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pkzgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f007799a17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 identity=9916 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6rs92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f007799a17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3249 identity=9916 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6rs92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccd9312423 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=857 identity=1964 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pkzgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccd9312423 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=857 identity=1964 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pkzgj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f007799a17 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3249 identity=9916 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6rs92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f007799a17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3249 identity=9916 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6rs92 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 158474a3-5976-44f5-a0b6-299053030fd4 default }" containerID=08ff3ecaf42070ced3828564d02faad0ca5205b80882410ac7554515c787bf29 datapathConfiguration="&{false false false false false }" interface=lxced52370ade1a k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08ff3ecaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08ff3ecaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08ff3ecaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identity=6811 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08ff3ecaf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=750 identity=6811 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08ff3ecaf4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=750 identity=6811 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08ff3ecaf4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=750 identity=6811 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08ff3ecaf4 endpointID=750 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4ktd2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c2cbc2b2-9978-4605-a9a3-bc920ecebe6e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=08ff3ecaf4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=750 identity=6811 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4ktd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 52cd156d-2154-42af-aa94-288d2c7ce4a3 default }" containerID=5506aa579013abcaf19d8b8eed058340f48b628ded0e81a435a09e83fb5c9057 datapathConfiguration="&{false false false false false }" interface=lxcb0003717383d k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5506aa5790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5506aa5790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5506aa5790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=38155 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5506aa5790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=38155 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5506aa5790 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=182 identity=38155 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5506aa5790 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=182 identity=38155 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5506aa5790 endpointID=182 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-q48l9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=8822fedc-b8a2-4f8e-a5a7-b925a40b6729 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5506aa5790 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=182 identity=38155 ipv4=10.0.0.214 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q48l9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 b169e6ea-3274-44f0-958d-b72b43f3f0d3 default }" containerID=c6cc61309d24800298229fdf35ebc6f1799ad34d3f50b4a027bd93480a88ef1c datapathConfiguration="&{false false false false false }" interface=lxc0410fd827cfd k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6cc61309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6cc61309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c6cc61309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6cc61309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identity=3142 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6cc61309d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identity=3142 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6cc61309d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2792 identity=3142 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6cc61309d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2792 identity=3142 ipv4=10.0.0.115 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m74nv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 d9cbfd47-5003-43c7-bec5-183027c5bf20 default }" containerID=6bb74a1f6d6fa355c3da5ffeb2141b48f4d3ad1b12cd47048733b491303d43c7 datapathConfiguration="&{false false false false false }" interface=lxc2d03d557f3b7 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bb74a1f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bb74a1f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bb74a1f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=61430 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bb74a1f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1694 identity=61430 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bb74a1f6d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1694 identity=61430 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bb74a1f6d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1694 identity=61430 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bb74a1f6d endpointID=1694 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-9nxzd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6334fc56-d0f1-42b4-9cf1-580f633e96f2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=6bb74a1f6d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1694 identity=61430 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9nxzd subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=72d9dcf6-ac24-408e-b19a-eb550df8e542] Description:}]" policyAddRequest=7add6888-a617-448d-bd9c-2e52a4a5cee9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7add6888-a617-448d-bd9c-2e52a4a5cee9 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=beb6488f-b63d-4dfb-8c19-b5038f35a788] Description:}]" policyAddRequest=5d2ca2cf-c433-4440-8dc7-05fa2008b03c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5d2ca2cf-c433-4440-8dc7-05fa2008b03c policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.217 8138f555-eaa2-4437-a0c7-1a1aa8d35fb9 default }" containerID=c824d92337babc8e7523b98201c698a731f2afdd81b392784dfeb6468f989097 datapathConfiguration="&{false false false false false }" interface=lxce6dfab8cac29 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rlqc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c824d92337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rlqc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c824d92337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rlqc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c824d92337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=2171 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rlqc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c824d92337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=2171 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rlqc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c824d92337 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1095 identity=2171 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rlqc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c824d92337 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1095 identity=2171 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-rlqc6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.56 340fee68-bdfc-456d-b4c2-760d05703c9b default }" containerID=9183b3c60e90be5553c67d23d7f618de792247e6b0839e51fe273c4cc19565c8 datapathConfiguration="&{false false false false false }" interface=lxc456a872e5214 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lfc58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9183b3c60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lfc58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9183b3c60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lfc58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9183b3c60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 identity=13696 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lfc58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9183b3c60e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 identity=13696 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lfc58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9183b3c60e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4059 identity=13696 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lfc58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9183b3c60e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4059 identity=13696 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lfc58 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 f54e1b95-e8a8-44ff-bb10-c2bf7ff32e11 default }" containerID=4c51ae7d7170a607a7b287c85737731eeb8b89912d2e2e014a979781d4af0db8 datapathConfiguration="&{false false false false false }" interface=lxc98803913bf41 k8sPodName=openstack/pxc-operator-69cb5bbdb9-bdvtw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c51ae7d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bdvtw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c51ae7d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bdvtw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c51ae7d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 identity=11497 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bdvtw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c51ae7d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 identity=11497 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bdvtw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c51ae7d71 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3529 identity=11497 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bdvtw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c51ae7d71 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3529 identity=11497 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-bdvtw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.247 6f757243-22af-49a7-87f7-fbea0735a048 default }" containerID=000feb6c5d45f276ea9428e1cdcea8088a7d61919330947f1a3500b4c8da88c6 datapathConfiguration="&{false false false false false }" interface=lxcb18ac743e24b k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=000feb6c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=000feb6c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=000feb6c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=62692 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=000feb6c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=62692 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=000feb6c5d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=932 identity=62692 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=000feb6c5d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=932 identity=62692 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 52c482c3-e746-4acf-9cb8-4eb6a8fae39c default }" containerID=6fbb990f67a24c1a44d9adfe34f24a110f900c22c4e846aaa18d93428210e52f datapathConfiguration="&{false false false false false }" interface=lxc10e08a934e05 k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fbb990f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fbb990f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fbb990f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fbb990f67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3102 identity=23308 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fbb990f67 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3102 identity=23308 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fbb990f67 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3102 identity=23308 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fbb990f67 endpointID=3102 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6fbb990f67 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3102 identity=23308 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-099b2cb7-4c36-485e-bcbb-5bcb70be26b5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 97a6b22f-19c0-4517-be17-202c7c116950 default }" containerID=9c9a8265188dfcd99326c99c407a86e3d8f5b4303c8ef738f484e693f357cb5b datapathConfiguration="&{false false false false false }" interface=lxc0b7da6faa8da k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c9a826518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c9a826518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c9a826518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=20322 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9c9a826518 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=574 identity=20322 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c9a826518 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=574 identity=20322 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c9a826518 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=574 identity=20322 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d1c0a973-0b2e-416f-9d76-5112a75c47f0] Description:}]" policyAddRequest=695db112-939c-4bc4-b3f7-ecddbf42feca subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=695db112-939c-4bc4-b3f7-ecddbf42feca policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.34 3fdbc689-644b-4cdf-a3ae-11154f3f9823 default }" containerID=55d0657610ffd03f2eb824b243945ca9bcceab6162b8b539f7a9c22999767810 datapathConfiguration="&{false false false false false }" interface=lxca4a2be8cf7b7 k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55d0657610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55d0657610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55d0657610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55d0657610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=23308 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55d0657610 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1807 identity=23308 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a subsys=endpoint level=info msg="Successful endpoint creation" containerID=55d0657610 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1807 identity=23308 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a subsys=daemon level=info msg="Delete endpoint request" containerID=55d0657610 endpointID=1807 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=55d0657610 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1807 identity=23308 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5340e867-1925-4b2a-bb64-1ca1bffa445a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 ac97396d-db60-4026-9907-979d12032a8f default }" containerID=11ffd93b7844200090259da5cb646ec326247aa2f78e2dd70468d46a188a5851 datapathConfiguration="&{false false false false false }" interface=lxc5a498ad71a21 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11ffd93b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11ffd93b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11ffd93b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=756 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11ffd93b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=756 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=11ffd93b78 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=229 identity=756 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11ffd93b78 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=229 identity=756 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=52a22656-67da-438b-9a39-f42b66a4febd] Description:}]" policyAddRequest=9408e3c5-0485-4c50-af78-bc40b407aad1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9408e3c5-0485-4c50-af78-bc40b407aad1 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.240 c0e8ad6c-e4af-4700-ac70-240dd2ddaafc default }" containerID=4cc6a47caf2b6ac76ba83ecb3d37242dd52f28374ea6e78ba8b4c671ecca59ae datapathConfiguration="&{false false false false false }" interface=lxc0910421d9ab7 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cc6a47caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cc6a47caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cc6a47caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=51243 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cc6a47caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1241 identity=51243 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cc6a47caf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1241 identity=51243 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cc6a47caf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1241 identity=51243 ipv4=10.0.0.240 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009661558023455571 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.252 98879000-c796-4a2c-84e1-123b7b08c68c default }" containerID=28324c2b1c8edc4d840d2206fc9200c4e97210caf6a1dc6d32af8e2ba7cb42b3 datapathConfiguration="&{false false false false false }" interface=lxc2e652b64c142 k8sPodName=monitoring/node-feature-discovery-worker-s65h4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28324c2b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s65h4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28324c2b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s65h4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28324c2b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 identity=64337 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s65h4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28324c2b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2710 identity=64337 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s65h4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 edba83f1-1e2c-4dc3-b27b-96e3009cc421 default }" containerID=ffc843464ea7731433e9798ca23392e19d45712a643778193c4e24529dc5bc55 datapathConfiguration="&{false false false false false }" interface=lxc9727bf5b11e4 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n7c9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffc843464e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n7c9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffc843464e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n7c9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffc843464e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 identity=60315 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n7c9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffc843464e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3138 identity=60315 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n7c9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 be6613b1-fa66-4031-b8d9-91b2915ec62b default }" containerID=a37f2b4fdfe4b9cb5ef813831996de636062aa21f91feb2fc7e2e5098120a214 datapathConfiguration="&{false false false false false }" interface=lxc9e72e35e1355 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-knp6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a37f2b4fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-knp6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a37f2b4fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-knp6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a37f2b4fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=514 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-knp6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a37f2b4fdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=514 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-knp6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28324c2b1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2710 identity=64337 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s65h4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28324c2b1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2710 identity=64337 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-s65h4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ffc843464e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3138 identity=60315 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n7c9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffc843464e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3138 identity=60315 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n7c9t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a37f2b4fdf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1810 identity=514 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-knp6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=a37f2b4fdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=514 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-knp6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 b5ba958e-9cf1-4ced-9a1a-ffaf3f6fa465 default }" containerID=15f0c75fa44e75bbe78ce104b7abf1e2c1fddbaca34b1dc72322059d7918a39a datapathConfiguration="&{false false false false false }" interface=lxc33b564084ab3 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hm454 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15f0c75fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hm454 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15f0c75fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hm454 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15f0c75fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=7829 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hm454 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15f0c75fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=7829 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hm454 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15f0c75fa4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2296 identity=7829 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hm454 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15f0c75fa4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2296 identity=7829 ipv4=10.0.0.184 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-hm454 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01806 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01806 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01806 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01806:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 62a9dfff-9995-47b4-9aa0-3b8491d1d101 default }" containerID=fdc45b73985b43f0b014f79ee6b83ac5f19748a41b73d73e0a062f4e6bd04a76 datapathConfiguration="&{false false false false false }" interface=lxce7b20a9b620c k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdc45b7398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdc45b7398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdc45b7398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=13032 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdc45b7398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=13032 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fdc45b7398 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2295 identity=13032 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdc45b7398 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=13032 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdc45b7398 endpointID=2295 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-m2mhp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=44d87b7e-5622-4be2-be54-737d2fa13e75 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fdc45b7398 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=13032 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-m2mhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 cea6bb41-9278-44dd-a985-9f0e4b2ee789 default }" containerID=a6738e16dcdb979d3101282d91dfa95a99c70845b7520709d896ebea93f80b2c datapathConfiguration="&{false false false false false }" interface=lxc08e6f20bae4f k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5shzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6738e16dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5shzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6738e16dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5shzp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a6738e16dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=37996 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5shzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6738e16dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=37996 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5shzp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 0d5d5fe5-0115-45fd-b691-aed132bc754b default }" containerID=c8aafda6329c16c4bee3255c1553759ebd62c8b3c7886ce57bd67fd431e7f3fa datapathConfiguration="&{false false false false false }" interface=lxc039165219a14 k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4cbc8978-ntbcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8aafda632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4cbc8978-ntbcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8aafda632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4cbc8978-ntbcq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8aafda632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=19714 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4cbc8978-ntbcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8aafda632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=19714 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4cbc8978-ntbcq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6738e16dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2582 identity=37996 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5shzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6738e16dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2582 identity=37996 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5shzp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 77c50d13-e765-499f-aa05-1ac6b97ae9f8 default }" containerID=9a62c4bcd4da63f5fd7ea03a38ffd70ecdd990f5641d0609ce2527a97de7629c datapathConfiguration="&{false false false false false }" interface=lxc527cd5ba079e k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cjfvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a62c4bcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cjfvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a62c4bcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cjfvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a62c4bcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=39247 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cjfvp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a62c4bcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=39247 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cjfvp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8aafda632 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2200 identity=19714 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4cbc8978-ntbcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8aafda632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2200 identity=19714 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4cbc8978-ntbcq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a62c4bcd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=39247 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cjfvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a62c4bcd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=39247 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cjfvp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 6ecc1af4-789a-4d77-8ee5-d81b6551e938 default }" containerID=d6219ddf2b1db6e36b39bb27e9f68d22229b9ac7e6014e17aaaee6084b32e8eb datapathConfiguration="&{false false false false false }" interface=lxcc6fbaf6794aa k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6219ddf2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6219ddf2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6219ddf2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=25889 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6219ddf2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=25889 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6219ddf2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=712 identity=25889 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6219ddf2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=25889 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 745d6bd6-4b68-4a33-b624-664c598ab956 default }" containerID=e055c5f82657b6515e87811668b8f353f8dae4db4784984f5f326512c8706d02 datapathConfiguration="&{false false false false false }" interface=lxca49dd810dcc4 k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e055c5f826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e055c5f826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e055c5f826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e055c5f826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=23308 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e055c5f826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=956 identity=23308 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e055c5f826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=956 identity=23308 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 6e586337-4f13-475f-a1b6-ee0f1730e8f9 default }" containerID=30699bb9fba3eeac0dd56c59245c145c37feb40b7a66f8afcae3959a3324396c datapathConfiguration="&{false false false false false }" interface=lxc1fe678ad4a1c k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30699bb9fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3174 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30699bb9fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3174 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff subsys=endpoint level=info msg="Identity of endpoint changed" containerID=30699bb9fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3174 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30699bb9fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3174 identity=23308 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30699bb9fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3174 identity=23308 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff subsys=endpoint level=info msg="Successful endpoint creation" containerID=30699bb9fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3174 identity=23308 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff subsys=daemon level=info msg="Delete endpoint request" containerID=d6219ddf2b endpointID=712 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-r4jqx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=bca27da7-ec70-4ebf-b0b2-dd42509a1bb2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d6219ddf2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=25889 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-r4jqx subsys=endpoint level=info msg="Delete endpoint request" containerID=30699bb9fb endpointID=3174 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=e055c5f826 endpointID=956 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=30699bb9fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3174 identity=23308 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b83afec0-5fed-42e1-921b-b568e01404ff subsys=endpoint level=info msg="Removed endpoint" containerID=e055c5f826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=956 identity=23308 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4dcced96-176d-4149-af2e-4dc24a7cb7f2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 16abe176-3ee8-46bb-b715-dbcfe6c5b3b4 default }" containerID=f6f4c6bf5011867798cc092716b1e87be76a97bfb641e52078ffdbbe28f21a5e datapathConfiguration="&{false false false false false }" interface=lxc2a182a63f087 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6f4c6bf50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6f4c6bf50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6f4c6bf50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=7678 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6f4c6bf50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=7678 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6f4c6bf50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=630 identity=7678 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6f4c6bf50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=630 identity=7678 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.41 88bd0570-c482-4303-9f20-b6e5b391f45c default }" containerID=9e338f0baa483b49b896c290e04d9e67dee01c511e7c9f73415c78d958e63411 datapathConfiguration="&{false false false false false }" interface=lxc2634768ce19b k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e338f0baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e338f0baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e338f0baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=38285 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e338f0baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=38285 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e338f0baa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=887 identity=38285 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e338f0baa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=887 identity=38285 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 2fa1530a-7b15-4776-b0b4-50e501c2aea8 default }" containerID=2f328bd43e8ac32bda60142a82b58b664182a5b057c8c92cea934d7d0f72d06b datapathConfiguration="&{false false false false false }" interface=lxcf37b493b1bcc k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f328bd43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f328bd43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2f328bd43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f328bd43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identity=62472 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f328bd43e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identity=62472 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 a858bbef-8d7e-42a8-b808-9de571fdcb00 default }" containerID=d964644caaff0e57513292d3694bd74d39ebf4b1c8f527c4f2ed1e9459328bbf datapathConfiguration="&{false false false false false }" interface=lxc59a518e6c9ef k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.79 8b9855d7-6ba6-40f5-982c-9a2cf896f7a7 default }" containerID=d21fe411628bdd7d2f4e66e04a1bab9c1976fd357ddb8ba05286436eeb923863 datapathConfiguration="&{false false false false false }" interface=lxc44537e55b03c k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d964644caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=d21fe41162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d964644caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d21fe41162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d964644caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=15595 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d964644caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1841 identity=15595 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d21fe41162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=17629 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d21fe41162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=17629 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f328bd43e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1443 identity=62472 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f328bd43e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1443 identity=62472 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vdvkj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d964644caa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1841 identity=15595 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d964644caa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1841 identity=15595 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d21fe41162 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=886 identity=17629 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d21fe41162 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=17629 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 f3a2abd8-a586-473c-a503-c66f51e26100 default }" containerID=9b3d1414a99e884b9d97b0272819bc5b73747c2fb52cb2ff886f46f9823c026d datapathConfiguration="&{false false false false false }" interface=lxc968f686a6009 k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b3d1414a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b3d1414a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b3d1414a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b3d1414a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 identity=23308 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b3d1414a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4072 identity=23308 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b3d1414a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4072 identity=23308 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 4a2b08d1-5e57-4448-bc13-3e5e1fd7f3cf default }" containerID=4fa88d32eb40227f299da7a657e4cb110fbc2e1e477dd6514ca1e24d8f6caa54 datapathConfiguration="&{false false false false false }" interface=lxc0d24a3569ec7 k8sPodName=monitoring/vector-n9j7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fa88d32eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/vector-n9j7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fa88d32eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/vector-n9j7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fa88d32eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=11859 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/vector-n9j7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fa88d32eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=11859 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/vector-n9j7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fa88d32eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1433 identity=11859 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/vector-n9j7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fa88d32eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1433 identity=11859 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/vector-n9j7t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b3d1414a9 endpointID=4072 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9b3d1414a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4072 identity=23308 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-60d5e8fb-c8b6-4169-a6dd-52dcc6c40249 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 d71923bd-1dfd-4326-b89a-e07b235eebc5 default }" containerID=f62847a61fd58c3206fcaff42cb36f5be4535b7c8460442e1aef98adc2f29178 datapathConfiguration="&{false false false false false }" interface=lxc9e19fd000fff k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ldq92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f62847a61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ldq92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f62847a61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ldq92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f62847a61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=59850 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ldq92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f62847a61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=59850 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ldq92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f62847a61f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2417 identity=59850 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ldq92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f62847a61f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2417 identity=59850 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ldq92 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 ef1ffbd8-0c3f-41fe-866c-cc7cbe70133e default }" containerID=dfe144fbf6b079aabfe5c6efa3ddbaac799d354b9aa6ab1c95d23e496a80a519 datapathConfiguration="&{false false false false false }" interface=lxc6df6c23eeb6b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfe144fbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfe144fbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfe144fbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=22298 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfe144fbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=22298 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfe144fbf6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2015 identity=22298 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfe144fbf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2015 identity=22298 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 bd43a7ec-fa2a-407d-bcc3-cbd8579183a1 default }" containerID=f504db4d04b4ab83ce7055826d4117fc8350529fee34620fb2fab4c47c4ad125 datapathConfiguration="&{false false false false false }" interface=lxc950950b18431 k8sPodName=openstack/memcached-memcached-cf56b6468-k7hpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f504db4d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-k7hpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f504db4d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-k7hpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f504db4d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=34699 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-k7hpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f504db4d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=34699 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-k7hpb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f504db4d04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=311 identity=34699 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-k7hpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f504db4d04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=311 identity=34699 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-k7hpb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 7c4b5ac3-4a14-4e06-b20d-59b4c630aaae default }" containerID=26b345373260f0ddde4a777cb5543bff908d0c1f73b2ec7810160f1df3b93e63 datapathConfiguration="&{false false false false false }" interface=lxc71e058e74e51 k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26b3453732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26b3453732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26b3453732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26b3453732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identity=23308 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26b3453732 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1234 identity=23308 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26b3453732 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1234 identity=23308 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 subsys=daemon level=info msg="Delete endpoint request" containerID=26b3453732 endpointID=1234 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=26b3453732 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1234 identity=23308 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-600b7f34-c33d-4ffd-9c5e-e1c301a12099 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 27fd72f9-824f-42ff-8e7e-755bd69956f3 default }" containerID=9e19494ea82b8d4edae44ff890b1fe69b86934e4f18551ac70a9d1fd4cd3170d datapathConfiguration="&{false false false false false }" interface=lxc61418b21f966 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e19494ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e19494ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e19494ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=36488 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e19494ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=36488 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9e19494ea8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3703 identity=36488 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e19494ea8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3703 identity=36488 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 6dd83d16-b253-44f8-b62d-65951a3ae6e8 default }" containerID=734391d65aa22fbe1dc4ca987c0ca13da8f3ed2a6cf60d4059b29da9ffc5e284 datapathConfiguration="&{false false false false false }" interface=lxcdb7f6571646c k8sPodName=openstack/keystone-api-57bc747cd8-xr7z6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=734391d65a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-57bc747cd8-xr7z6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=734391d65a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-57bc747cd8-xr7z6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=734391d65a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=23707 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-57bc747cd8-xr7z6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=734391d65a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=23707 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-57bc747cd8-xr7z6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 9fc70b75-8c99-4ef7-af73-315d30427cd1 default }" containerID=584b60dc2cbed1c640c39385a613094b131a6433eda99b9e1caa483ed57f8a29 datapathConfiguration="&{false false false false false }" interface=lxcbb7cb7e33041 k8sPodName=openstack/keystone-credential-setup-thp5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=584b60dc2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-credential-setup-thp5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=584b60dc2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-credential-setup-thp5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=584b60dc2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 identity=8050 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-credential-setup-thp5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=584b60dc2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2390 identity=8050 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-credential-setup-thp5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=734391d65a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3015 identity=23707 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-57bc747cd8-xr7z6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=734391d65a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=23707 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-api-57bc747cd8-xr7z6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=584b60dc2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2390 identity=8050 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-credential-setup-thp5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=584b60dc2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2390 identity=8050 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-credential-setup-thp5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=584b60dc2c endpointID=2390 k8sNamespace=openstack k8sPodName=keystone-credential-setup-thp5r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=81b1ff06-235a-4f30-93c3-d0a82812abc0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=584b60dc2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2390 identity=8050 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-credential-setup-thp5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 0f1f9f11-8be8-41f9-9889-212bf481a03a default }" containerID=1b542a301ffbbd8802f475cc10cdf760c6dee5c156608cee189c23d190a38e47 datapathConfiguration="&{false false false false false }" interface=lxc5abc8fca77f4 k8sPodName=openstack/keystone-db-init-ct22n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b542a301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-ct22n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b542a301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-ct22n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b542a301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=36834 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-ct22n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b542a301f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=36834 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-ct22n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b542a301f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1830 identity=36834 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-ct22n subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b542a301f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=36834 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-ct22n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b542a301f endpointID=1830 k8sNamespace=openstack k8sPodName=keystone-db-init-ct22n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=431a5a68-f646-4ff9-93ed-39a1e30ba8c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1b542a301f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=36834 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-init-ct22n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 8269c1e0-f6d6-45f8-9c98-6754777f66bd default }" containerID=cabc66935e5e4f5e1b71839e923b558d559a2e086ed9199f8953809a55071ba8 datapathConfiguration="&{false false false false false }" interface=lxc8624cb2bf00a k8sPodName=openstack/keystone-fernet-setup-5jn7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cabc66935e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cabc66935e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cabc66935e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cabc66935e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=14697 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cabc66935e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3256 identity=14697 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cabc66935e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3256 identity=14697 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=cabc66935e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3256 identity=14697 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cabc66935e endpointID=3256 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-5jn7k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=690b06a0-97f2-4992-8659-bc47dd1f454d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cabc66935e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3256 identity=14697 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-fernet-setup-5jn7k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 e8acda99-6ddd-499f-b997-4d53d3cb14b3 default }" containerID=c05f0cbd8d6db2355e0cdcc1c1857e2a679f53ce7613edca6650437915790780 datapathConfiguration="&{false false false false false }" interface=lxc21381186a789 k8sPodName=openstack/keystone-db-sync-ssr7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c05f0cbd8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3633 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-ssr7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c05f0cbd8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3633 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-ssr7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c05f0cbd8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3633 identity=795 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-ssr7g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c05f0cbd8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3633 identity=795 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-ssr7g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c05f0cbd8d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3633 identity=795 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-ssr7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=c05f0cbd8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3633 identity=795 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-ssr7g subsys=daemon level=info msg="Delete endpoint request" containerID=c05f0cbd8d endpointID=3633 k8sNamespace=openstack k8sPodName=keystone-db-sync-ssr7g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ba0b9b6d-b7d7-4508-87ef-274ce42a5d7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c05f0cbd8d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3633 identity=795 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-ssr7g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 20eb8929-7d1b-4efc-a038-7d1d51ba7378 default }" containerID=33b8b8fa0bd66d53be4de5eeed0c4050698a3aaaf7b18e8ccb0b0d2d316d06e0 datapathConfiguration="&{false false false false false }" interface=lxc97ee72eae143 k8sPodName=openstack/keystone-rabbit-init-kbsnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33b8b8fa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-rabbit-init-kbsnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33b8b8fa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-rabbit-init-kbsnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33b8b8fa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=23356 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-rabbit-init-kbsnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33b8b8fa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=23356 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-rabbit-init-kbsnz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33b8b8fa0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1280 identity=23356 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-rabbit-init-kbsnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=33b8b8fa0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1280 identity=23356 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-rabbit-init-kbsnz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33b8b8fa0b endpointID=1280 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-kbsnz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=88c6b423-1734-416a-a8a7-30efd42a6c41 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=33b8b8fa0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1280 identity=23356 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/keystone-rabbit-init-kbsnz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 e1aebfe5-c0b2-4bf0-aca9-4d083cd77333 default }" containerID=f061a8bb11aacc2d3fce869edc5e5034c7cd2fb1dd677dd41d0bd6a40d171ed7 datapathConfiguration="&{false false false false false }" interface=lxc080925e30653 k8sPodName=openstack/keystone-domain-manage-6c9kl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f061a8bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-6c9kl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f061a8bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=111588dd-c323-4034-8831-b6497bb152e4,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=111588dd-c323-4034-8831-b6497bb152e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-6c9kl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=111588dd-c323-4034-8831-b6497bb152e4;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=111588dd-c323-4034-8831-b6497bb152e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f061a8bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=7392 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=111588dd-c323-4034-8831-b6497bb152e4,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=111588dd-c323-4034-8831-b6497bb152e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-6c9kl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f061a8bb11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=7392 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-6c9kl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f061a8bb11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=189 identity=7392 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-6c9kl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f061a8bb11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=189 identity=7392 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-6c9kl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f061a8bb11 endpointID=189 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6c9kl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=111588dd-c323-4034-8831-b6497bb152e4 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=111588dd-c323-4034-8831-b6497bb152e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f061a8bb11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=189 identity=7392 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-6c9kl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 9aea059a-886e-4798-8986-98f52e8699da default }" containerID=00930dd98132c047d95c9bc37d2761f69a63e0e9701eed9fe2521164708cffe3 datapathConfiguration="&{false false false false false }" interface=lxc9fc99438b526 k8sPodName=openstack/keystone-bootstrap-tlt5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00930dd981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-bootstrap-tlt5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00930dd981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-bootstrap-tlt5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00930dd981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=32825 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-bootstrap-tlt5r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=00930dd981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=32825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-bootstrap-tlt5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00930dd981 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1736 identity=32825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-bootstrap-tlt5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=00930dd981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1736 identity=32825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-bootstrap-tlt5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00930dd981 endpointID=1736 k8sNamespace=openstack k8sPodName=keystone-bootstrap-tlt5r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b975e1de-f37b-46a1-afe1-2754d0cea092 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=00930dd981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1736 identity=32825 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/keystone-bootstrap-tlt5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 2c6c5093-388d-42c3-80fc-5537b47410f7 default }" containerID=fab693768d2d27001245b7fd142b9f6c1350c3c3bd991d17e004aac3c5873231 datapathConfiguration="&{false false false false false }" interface=lxc8d9a46ac46a9 k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fab693768d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fab693768d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fab693768d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fab693768d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=23308 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fab693768d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=826 identity=23308 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba subsys=endpoint level=info msg="Successful endpoint creation" containerID=fab693768d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=826 identity=23308 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba subsys=daemon level=info msg="Delete endpoint request" containerID=fab693768d endpointID=826 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fab693768d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=826 identity=23308 ipv4=10.0.0.153 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fad750e8-6777-41db-bd2a-cf7f9a1835ba subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 bc64bc1b-6c6d-4092-802b-1966ae5777b8 default }" containerID=15f09ba48e3db7732214744ac278d42435c8e76a4295808bcc890e2a1101fef2 datapathConfiguration="&{false false false false false }" interface=lxc86cf01070dcb k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15f09ba48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15f09ba48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15f09ba48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=11137 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15f09ba48e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3736 identity=11137 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=15f09ba48e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3736 identity=11137 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15f09ba48e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3736 identity=11137 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 a548479a-b7e9-4609-881f-0b4e2fb0665e default }" containerID=9d274456cda63ed7cae876d88f1f27016e208c1798a6db3fcb76e98147d3525c datapathConfiguration="&{false false false false false }" interface=lxc3ca45c1eeb0a k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d274456cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d274456cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9d274456cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d274456cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=27215 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d274456cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=27215 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 217182d7-1879-480f-aa10-28d3413e3064 default }" containerID=0ccea4627896cfcf339d4e5bea69b255aa67b53757b47e6f2deecc255012e55e datapathConfiguration="&{false false false false false }" interface=lxc374f9054c66a k8sPodName=openstack/barbican-db-init-c526m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ccea46278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-db-init-c526m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ccea46278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-db-init-c526m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ccea46278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=30489 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-db-init-c526m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ccea46278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=30489 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-db-init-c526m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d274456cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=66 identity=27215 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d274456cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=27215 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7644fb48c-jg4z8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0ccea46278 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=30489 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-db-init-c526m subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ccea46278 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=30489 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-db-init-c526m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ccea46278 endpointID=29 k8sNamespace=openstack k8sPodName=barbican-db-init-c526m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=caa5f4a5-4580-40c2-9755-3ab9b90dcea1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0ccea46278 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=30489 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/barbican-db-init-c526m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 5a4a6e6c-63c4-45d8-b282-68e397e418d3 default }" containerID=60a6b96c715cb20f827fb207b568e4635cf8d4102685e88a1b5148ca0522bcfb datapathConfiguration="&{false false false false false }" interface=lxcd29bf2f86e5a k8sPodName=openstack/barbican-db-sync-pp8mb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60a6b96c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-db-sync-pp8mb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60a6b96c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-db-sync-pp8mb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60a6b96c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identity=45577 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-db-sync-pp8mb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60a6b96c71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4047 identity=45577 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-db-sync-pp8mb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=60a6b96c71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4047 identity=45577 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-db-sync-pp8mb subsys=endpoint level=info msg="Successful endpoint creation" containerID=60a6b96c71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4047 identity=45577 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-db-sync-pp8mb subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035886753148376103 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=60a6b96c71 endpointID=4047 k8sNamespace=openstack k8sPodName=barbican-db-sync-pp8mb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=1c6ff6e5-b336-4510-9e61-3022b5594999 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=60a6b96c71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4047 identity=45577 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/barbican-db-sync-pp8mb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 986d69f9-0c5e-4ee2-8c36-af69b166c8b3 default }" containerID=365be81b27f62146e6b3282b1d79e3a33f2876e6436f96040f7118fbb04cb152 datapathConfiguration="&{false false false false false }" interface=lxc9a52be6e35d1 k8sPodName=openstack/barbican-rabbit-init-pjjjc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=365be81b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=365be81b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=365be81b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=365be81b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=6238 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=365be81b27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=6238 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=365be81b27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3050 identity=6238 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=365be81b27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3050 identity=6238 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=365be81b27 endpointID=3050 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-pjjjc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3124a93e-3725-45ad-b33c-ce4f2518c7f3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=365be81b27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3050 identity=6238 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-rabbit-init-pjjjc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 81173a36-6643-4fa9-8ecd-c2c9b9eaf1f7 default }" containerID=788b203bb9d93f379e8adda4b4545b18f6b0cd6ac3576cde9530f4b6d398c614 datapathConfiguration="&{false false false false false }" interface=lxc304399fe04ea k8sPodName=openstack/barbican-ks-service-4mxg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=788b203bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=788b203bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=788b203bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=788b203bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=1473 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=788b203bb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=1473 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=788b203bb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=322 identity=1473 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=788b203bb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=1473 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=788b203bb9 endpointID=322 k8sNamespace=openstack k8sPodName=barbican-ks-service-4mxg5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=4ae9d58e-2d42-41ff-9f84-e3a75a5e9ae7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=788b203bb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=1473 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-ks-service-4mxg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 67556834-79a5-4a7f-ab1c-a0b1a2c32144 default }" containerID=75406164462fd524b5c1072be5180b846112ad4943db6e14094ba6194f3dab57 datapathConfiguration="&{false false false false false }" interface=lxc154fb35171b2 k8sPodName=openstack/barbican-ks-endpoints-hggqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7540616446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hggqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7540616446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hggqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7540616446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=3400 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hggqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7540616446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=398 identity=3400 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hggqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7540616446 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=398 identity=3400 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hggqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7540616446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=3400 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hggqj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7540616446 endpointID=398 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-hggqj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c6e0c346-8024-4b09-8360-94a52bfd101c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7540616446 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=398 identity=3400 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hggqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 be9ee9f5-2845-4132-9075-811f6f773eef default }" containerID=c1180d41d048f91859080560499bee2e521037b2e3d3292121f98bf056e2b5b0 datapathConfiguration="&{false false false false false }" interface=lxcc3cbaf6e40c3 k8sPodName=openstack/barbican-ks-user-ddllk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1180d41d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-ks-user-ddllk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1180d41d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-ks-user-ddllk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1180d41d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=2472 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-ks-user-ddllk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1180d41d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=251 identity=2472 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-ks-user-ddllk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1180d41d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=251 identity=2472 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-ks-user-ddllk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1180d41d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=2472 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-ks-user-ddllk subsys=daemon level=info msg="Delete endpoint request" containerID=c1180d41d0 endpointID=251 k8sNamespace=openstack k8sPodName=barbican-ks-user-ddllk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=690e550a-fbdc-4625-97a8-b5798c20a4b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c1180d41d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=251 identity=2472 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-ks-user-ddllk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.78 e9f11f7d-6ff4-48e4-a58c-43ad50350067 default }" containerID=6d1fcb1540830a8d3f59b20c7c22962c4e14c97c7f244f0e921e776746cdc471 datapathConfiguration="&{false false false false false }" interface=lxc93f46f5f078a k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d1fcb1540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 ipv4=10.0.0.78 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d1fcb1540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.78 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d1fcb1540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d1fcb1540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=26166 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.78 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d1fcb1540 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=26166 ipv4=10.0.0.78 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d1fcb1540 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=964 identity=26166 ipv4=10.0.0.78 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d1fcb1540 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=964 identity=26166 ipv4=10.0.0.78 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mlsmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 13b55506-26e6-45e4-a618-b788521b71ba default }" containerID=74c583b1b6f5f7ff24d6c15a2404443869e3ba53e6bda9106050332c4e38c29a datapathConfiguration="&{false false false false false }" interface=lxcc8569d5360e7 k8sPodName=openstack/rook-ceph-detect-version-s8zlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74c583b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-detect-version-s8zlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74c583b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-detect-version-s8zlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74c583b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=22173 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-detect-version-s8zlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74c583b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=22173 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-detect-version-s8zlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74c583b1b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=216 identity=22173 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-detect-version-s8zlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=74c583b1b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=22173 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-detect-version-s8zlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74c583b1b6 endpointID=216 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-s8zlh subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=ab0f0c4a-e551-421d-8173-bf8bcce6a263 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=74c583b1b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=22173 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-detect-version-s8zlh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 3629b73c-8392-4342-ae3d-481c20863a42 default }" containerID=2555cdd8f33c05b01892278e5288806664656334a26780dbfad1469b848971c1 datapathConfiguration="&{false false false false false }" interface=lxcddf59c2763b8 k8sPodName=openstack/ceph-object-controller-detect-version-qvprl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2555cdd8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qvprl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2555cdd8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qvprl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2555cdd8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 identity=57678 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qvprl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2555cdd8f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1844 identity=57678 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qvprl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2555cdd8f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1844 identity=57678 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qvprl subsys=endpoint level=info msg="Successful endpoint creation" containerID=2555cdd8f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1844 identity=57678 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qvprl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2555cdd8f3 endpointID=1844 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-qvprl subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=9adb88cd-b278-4cdb-a85d-a48798c7644e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2555cdd8f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1844 identity=57678 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qvprl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 4c60ae81-2871-4dab-89ee-9e1f5871ad36 default }" containerID=d8aae8e16a13676398f6972faee25198012b7e8f73a46858cacc6ba1ead7abb1 datapathConfiguration="&{false false false false false }" interface=lxc76b0ba476031 k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8aae8e16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8aae8e16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8aae8e16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identity=23308 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8aae8e16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identity=23308 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8aae8e16a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2770 identity=23308 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8aae8e16a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2770 identity=23308 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec subsys=daemon level=info msg="Delete endpoint request" containerID=d8aae8e16a endpointID=2770 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d8aae8e16a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2770 identity=23308 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59441a40-948c-4e91-ad7f-d4f21656b3ec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 8a2f98c4-067b-4fef-a773-91d4eea48d15 default }" containerID=64cc0393a915733a4d087ccca24bf19a5438eb054cdaa72a0fc08aa7ec4b8a2b datapathConfiguration="&{false false false false false }" interface=lxc8395c83d98d0 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64cc0393a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64cc0393a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64cc0393a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 identity=18334 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64cc0393a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3455 identity=18334 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=64cc0393a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3455 identity=18334 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64cc0393a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3455 identity=18334 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 121e27fc-1d7c-4660-92eb-cef73d9cfe10 default }" containerID=29339568321a5fbadd15a8404e8159d17f5bbe29a7cf25b82adc73aebe5684f3 datapathConfiguration="&{false false false false false }" interface=lxc5e94d77bfcc9 k8sPodName=openstack/glance-db-init-hjmhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2933956832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-init-hjmhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2933956832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-init-hjmhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2933956832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=40959 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-init-hjmhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2933956832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=40959 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-init-hjmhb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2933956832 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2580 identity=40959 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-init-hjmhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2933956832 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2580 identity=40959 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-init-hjmhb subsys=daemon level=info msg="Delete endpoint request" containerID=2933956832 endpointID=2580 k8sNamespace=openstack k8sPodName=glance-db-init-hjmhb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=8eb83d56-a334-4bcb-a072-e53bea691aae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2933956832 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2580 identity=40959 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-init-hjmhb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 262307d4-18ff-4f29-8972-63a5936ce3fc default }" containerID=3fe504af4ec8d9bc42fcd0c7468fbfba1a3a716dc341f92f5c953f2c76e6834e datapathConfiguration="&{false false false false false }" interface=lxc6aa3be035a54 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fe504af4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fe504af4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3fe504af4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fe504af4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=51928 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fe504af4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=51928 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 e3e6ddb3-e564-426d-8b30-e9ab4325f6c2 default }" containerID=ae60d8e4dd68ab9b9f852406389ced986337f793a20bb19973f3930c8f11cf15 datapathConfiguration="&{false false false false false }" interface=lxc02a912323010 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xsgvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae60d8e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xsgvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae60d8e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xsgvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae60d8e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=14300 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xsgvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae60d8e4dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=14300 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xsgvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fe504af4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1911 identity=51928 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fe504af4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1911 identity=51928 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jzncd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ae60d8e4dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1015 identity=14300 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xsgvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae60d8e4dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=14300 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-xsgvx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 157fa981-5042-4be8-b732-659081e10164 default }" containerID=85f1860077946d5958005657ce3bfbd115e84f9eb781c667b959200ebf685dde datapathConfiguration="&{false false false false false }" interface=lxca03faa10167e k8sPodName=openstack/glance-db-sync-495q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85f1860077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-495q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85f1860077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-495q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85f1860077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=64617 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-495q6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85f1860077 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=64617 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-495q6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85f1860077 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2766 identity=64617 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-495q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85f1860077 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2766 identity=64617 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-495q6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85f1860077 endpointID=2766 k8sNamespace=openstack k8sPodName=glance-db-sync-495q6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=5dfd857e-8aa1-4d07-91de-d33469930ddd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=85f1860077 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2766 identity=64617 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-495q6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 a5659841-12be-486a-b462-aa0c556f2a17 default }" containerID=67cf08543469cf821d4e64672c34b569d28f7bd35eb2a84cd5077747109b6cc2 datapathConfiguration="&{false false false false false }" interface=lxcec26de81153f k8sPodName=openstack/glance-rabbit-init-vrd2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67cf085434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-rabbit-init-vrd2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67cf085434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-rabbit-init-vrd2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=67cf085434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identity=21979 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-rabbit-init-vrd2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67cf085434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2194 identity=21979 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-rabbit-init-vrd2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67cf085434 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2194 identity=21979 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-rabbit-init-vrd2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=67cf085434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2194 identity=21979 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-rabbit-init-vrd2v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67cf085434 endpointID=2194 k8sNamespace=openstack k8sPodName=glance-rabbit-init-vrd2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6690053b-6a00-464d-b6e5-c1a58f9edf00 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=67cf085434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2194 identity=21979 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-rabbit-init-vrd2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 4e81b6bc-1bae-4e84-aa47-b15f538c370b default }" containerID=a11408a9aa1969ed6b338709b5b4e1cfba4ac7d6eafe117de858d6d1a4a587a2 datapathConfiguration="&{false false false false false }" interface=lxcb0c95a016199 k8sPodName=openstack/glance-ks-service-vw95n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a11408a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-service-vw95n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a11408a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-service-vw95n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a11408a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=19359 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-service-vw95n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a11408a9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=19359 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-service-vw95n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a11408a9aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=498 identity=19359 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-service-vw95n subsys=endpoint level=info msg="Successful endpoint creation" containerID=a11408a9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=19359 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-service-vw95n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a11408a9aa endpointID=498 k8sNamespace=openstack k8sPodName=glance-ks-service-vw95n subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=f502ce4d-7d91-47c4-be73-87773bc67708 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a11408a9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=19359 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-ks-service-vw95n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 f30c9b0e-0acd-4ce4-9fed-a030684080f0 default }" containerID=94b726106d9eeaeeb6971b16b203100afe279f3e7b02757f727cd6a902065e5c datapathConfiguration="&{false false false false false }" interface=lxc1add6b64fb49 k8sPodName=openstack/glance-ks-endpoints-md8bf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94b726106d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-md8bf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94b726106d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-md8bf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94b726106d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=24424 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-md8bf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94b726106d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=24424 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-md8bf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94b726106d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=995 identity=24424 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-md8bf subsys=endpoint level=info msg="Successful endpoint creation" containerID=94b726106d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=995 identity=24424 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-md8bf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94b726106d endpointID=995 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-md8bf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=46e41a22-6628-4380-8ed8-9979e7cc75cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=94b726106d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=995 identity=24424 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-md8bf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 cdabbf81-04fd-4f6d-bf42-7b0ff9a4f810 default }" containerID=bb9574b9d424383119b40ae91fc68ab9caec1d73a5f5985dd213594296b994ac datapathConfiguration="&{false false false false false }" interface=lxc9dcf2f71a821 k8sPodName=openstack/glance-ks-user-4mwq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb9574b9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-user-4mwq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb9574b9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-user-4mwq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb9574b9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=1800 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-user-4mwq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb9574b9d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=1800 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-user-4mwq8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb9574b9d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=718 identity=1800 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-user-4mwq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb9574b9d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=718 identity=1800 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-user-4mwq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb9574b9d4 endpointID=718 k8sNamespace=openstack k8sPodName=glance-ks-user-4mwq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=a8026947-7aef-495d-be69-2ccb36450ce8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bb9574b9d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=718 identity=1800 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-ks-user-4mwq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 81860eff-8088-482a-b72f-640db48bf783 default }" containerID=de9577dea5333d6711474d25a032ac7e7e4f943e85c1638344e069ae911b0f49 datapathConfiguration="&{false false false false false }" interface=lxc9cc98ffc0c23 k8sPodName=openstack/glance-metadefs-load-dk44z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de9577dea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-metadefs-load-dk44z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de9577dea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-metadefs-load-dk44z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de9577dea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=15067 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-metadefs-load-dk44z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de9577dea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=15067 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-metadefs-load-dk44z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de9577dea5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1765 identity=15067 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-metadefs-load-dk44z subsys=endpoint level=info msg="Successful endpoint creation" containerID=de9577dea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1765 identity=15067 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-metadefs-load-dk44z subsys=daemon level=info msg="Delete endpoint request" containerID=de9577dea5 endpointID=1765 k8sNamespace=openstack k8sPodName=glance-metadefs-load-dk44z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b2349c01-76f6-410c-a5ee-e41cbeebb308 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=de9577dea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1765 identity=15067 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-metadefs-load-dk44z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 94b1621d-d782-40ce-a94a-c2ba5ea7b625 default }" containerID=0d20c9f989da85f3868027b20806a7824e11b1d01d6e76f644b6679156030818 datapathConfiguration="&{false false false false false }" interface=lxcb02ed1c9de17 k8sPodName=openstack/glance-storage-init-kmsb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d20c9f989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-kmsb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d20c9f989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-kmsb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d20c9f989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=16804 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-kmsb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d20c9f989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=16804 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-kmsb2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d20c9f989 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3590 identity=16804 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-kmsb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d20c9f989 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3590 identity=16804 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-kmsb2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d20c9f989 endpointID=3590 k8sNamespace=openstack k8sPodName=glance-storage-init-kmsb2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=6f65d663-7f11-4ac3-bba4-8726a40be966 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0d20c9f989 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3590 identity=16804 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-storage-init-kmsb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 8854f75e-8661-4e04-bcb4-8c4d3305f456 default }" containerID=1d9d52c6776ce88dbb34b3578cd50cfe35782f9e6b0db5e06c9faf2dc021fb6f datapathConfiguration="&{false false false false false }" interface=lxc7d2b3ab3cb75 k8sPodName=openstack/glance-api-55b7f7ffbc-qk5xk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d9d52c677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-api-55b7f7ffbc-qk5xk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d9d52c677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-api-55b7f7ffbc-qk5xk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1d9d52c677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=8667 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-api-55b7f7ffbc-qk5xk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d9d52c677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=8667 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-api-55b7f7ffbc-qk5xk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d9d52c677 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1837 identity=8667 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-api-55b7f7ffbc-qk5xk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d9d52c677 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1837 identity=8667 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-api-55b7f7ffbc-qk5xk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager