level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="869.368µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="45.291µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="917.138µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.16µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.646349ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="91.272µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="48.081µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="103.592µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="111.272µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="113.133µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="986.119µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.21µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.448725ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.999717ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="126.882µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="81.441µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="251.375µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="153.543µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="152.503µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.313667ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="115.682µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.222.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.122997ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=203.975431ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.238541ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="32.451µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.58µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="96.652µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="450.839µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.91µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="265.975µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="887.457µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.450688ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="7.06µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="33.7µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.222 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.222 ipAddr.ipv6="" k8sNodeIP=199.204.45.222 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.222" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.112" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.222" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.222} {CiliumInternalIP 10.0.0.112}] 10.0.0.0/24 [] [] 10.0.0.225 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43139" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.713624597s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="21.071µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.56µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="39.621µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.931µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.783216717s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=306.572289ms file-path=/var/run/cilium/state/templates/ad4122ee9796a2bc18f8ecf8bd55870a2d42497d9707ab36d3d856ce7976bd2f/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1641 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 ipv4=10.0.0.225 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identityLabels="reserved:health" ipv4=10.0.0.225 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identity=4 identityLabels="reserved:health" ipv4=10.0.0.225 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.12129665s file-path=/var/run/cilium/state/templates/02f712325328e161f45566aed22f04b1f729b2cc1bbda4326746287a98a6ec80/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1243 identity=4 ipv4=10.0.0.225 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 0a11bba1-ab5d-4404-880b-d6f797eb0d4a default }" containerID=cbd80cbfc8f1aa5cc911a64ba8bf2acf636acbde650220dab2d38b5108553572 datapathConfiguration="&{false false false false false }" interface=lxca105a024c1a8 k8sPodName=kube-system/coredns-7c96b6546b-48l8t labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.97 5525039b-4133-42e9-b3f4-520644df0023 default }" containerID=a285ef5adad2bae2dfd6aa03cf94059f8ed543a6e4d0f44aaef045dbd6483326 datapathConfiguration="&{false false false false false }" interface=lxc1612005ce3c5 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbd80cbfc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t subsys=endpoint level=info msg="New endpoint" containerID=a285ef5ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a285ef5ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=cbd80cbfc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a285ef5ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a285ef5ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=59898 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a285ef5ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=59898 ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs subsys=endpoint level=info msg="Invalid state transition skipped" containerID=cbd80cbfc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbd80cbfc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identity=31389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbd80cbfc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1814 identity=31389 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a285ef5ada datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=650 identity=59898 ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=a285ef5ada datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=650 identity=59898 ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cbd80cbfc8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1814 identity=31389 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbd80cbfc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1814 identity=31389 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a285ef5ada endpointID=650 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5tkjs subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=1e5fc976-b8f6-4a26-95ef-011cc6061769 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=a285ef5ada datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=650 identity=59898 ipv4=10.0.0.97 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5tkjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 a9a66882-9181-48c6-b3db-042cce07f26e default }" containerID=8d96e8fc2be7adedc1dc28d67a4264fa895a046c3b9a0922d07b27c53a0c90b7 datapathConfiguration="&{false false false false false }" interface=lxc01e184310a56 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6mhrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d96e8fc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 ipv4=10.0.0.236 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6mhrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d96e8fc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.236 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6mhrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d96e8fc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=19681 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.236 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6mhrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d96e8fc2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=19681 ipv4=10.0.0.236 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6mhrb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d96e8fc2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1651 identity=19681 ipv4=10.0.0.236 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6mhrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d96e8fc2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1651 identity=19681 ipv4=10.0.0.236 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6mhrb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1641 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01641 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01641 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1641 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 e7bef124-10a6-42f3-9441-18ca1fcedbc5 default }" containerID=9dc21da55b4ac256914a74167abcb9474b19fa0888ea43e24c981c781d16f380 datapathConfiguration="&{false false false false false }" interface=lxc75a89cb73fb0 k8sPodName=kube-system/coredns-67659f764b-9h8rf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dc21da55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-67659f764b-9h8rf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dc21da55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-67659f764b-9h8rf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9dc21da55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=31389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-67659f764b-9h8rf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dc21da55b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=31389 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-67659f764b-9h8rf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 36831cec-f598-4c96-a067-3e96867324b9 default }" containerID=4ccb9c2f6b119dd57571caace8a093b5c696dc2f34cab0406218845639af3d9f datapathConfiguration="&{false false false false false }" interface=lxcf0e65d16510b k8sPodName=kube-system/coredns-67659f764b-nnqbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ccb9c2f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4017 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnqbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ccb9c2f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnqbd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4ccb9c2f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4017 identity=31389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnqbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ccb9c2f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4017 identity=31389 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnqbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9dc21da55b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2189 identity=31389 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-67659f764b-9h8rf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dc21da55b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2189 identity=31389 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-67659f764b-9h8rf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ccb9c2f6b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4017 identity=31389 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnqbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ccb9c2f6b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4017 identity=31389 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-nnqbd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 10df2d27-a301-494b-80f0-ab85ab00d416 default }" containerID=900eba8f17fa4741ee6dbc431edf0f8c86f0a61f4f1dc5f6d87df99266e3d231 datapathConfiguration="&{false false false false false }" interface=lxc9fca33dfd472 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w8kbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=900eba8f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w8kbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=900eba8f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w8kbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=900eba8f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=3977 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w8kbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=900eba8f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=3977 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w8kbj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=900eba8f17 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=420 identity=3977 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w8kbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=900eba8f17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=420 identity=3977 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-w8kbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbd80cbfc8 endpointID=1814 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-48l8t subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=cbd80cbfc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1814 identity=31389 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-48l8t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 f42dee9c-f35b-4a8c-9f1f-4560bfa110b8 default }" containerID=c1b7890472cc9198daf644b60e32bc5a06484aa67fb6af38b3cb39275d571fcc datapathConfiguration="&{false false false false false }" interface=lxc29a87a7a9fe0 k8sPodName=cert-manager/cert-manager-75c4c745bc-7c5zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1b7890472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7c5zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1b7890472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7c5zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1b7890472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=48347 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7c5zr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c1b7890472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=48347 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7c5zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1b7890472 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3414 identity=48347 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7c5zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1b7890472 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3414 identity=48347 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7c5zr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 e7ab9fb0-7d05-4395-9cf1-a7c6b24d35e9 default }" containerID=c698539281f7a1ae86de1f8b15b5e4386cb2565cefe588b001bc3c5288c88bd0 datapathConfiguration="&{false false false false false }" interface=lxcd043aff4869c k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m82qs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c698539281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m82qs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 c21a27a3-d077-4722-a895-5a47def37141 default }" containerID=2b2edc927f24fcbea015dbebc922dc425bb0d0e3bad03f5830e2603e58bfe36b datapathConfiguration="&{false false false false false }" interface=lxc9e06f1625fa5 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4l5jt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b2edc927f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4l5jt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c698539281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m82qs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=2b2edc927f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4l5jt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c698539281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=10098 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m82qs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c698539281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=10098 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m82qs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b2edc927f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=3183 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4l5jt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b2edc927f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=3183 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4l5jt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c698539281 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=307 identity=10098 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m82qs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c698539281 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=307 identity=10098 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m82qs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b2edc927f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=274 identity=3183 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4l5jt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b2edc927f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=274 identity=3183 ipv4=10.0.0.215 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4l5jt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 d89494a1-d054-4a29-8769-11726503e60d default }" containerID=ca707ffede67dd5804b5de6ce630eac6c53cb780d7f9a7cce8e6d8efb3443c14 datapathConfiguration="&{false false false false false }" interface=lxc4877bdbb6d64 k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca707ffede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca707ffede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca707ffede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 identity=23457 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca707ffede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1680 identity=23457 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca707ffede datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1680 identity=23457 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca707ffede datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1680 identity=23457 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca707ffede endpointID=1680 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-cc2n2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=69c4cb09-1a00-49b7-8c2a-b9f3bdd93781 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ca707ffede datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1680 identity=23457 ipv4=10.0.0.199 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cc2n2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 f9cff875-91b0-434e-be3b-d613d99f1aba default }" containerID=62da7e85abafcbb197375353c3095eec44c93d593a78724c6b900c868ac4cd00 datapathConfiguration="&{false false false false false }" interface=lxc213246a16636 k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62da7e85ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62da7e85ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62da7e85ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=3474 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=62da7e85ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=3474 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62da7e85ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1361 identity=3474 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=62da7e85ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1361 identity=3474 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62da7e85ab endpointID=1361 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-j68hg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e50ff43e-5d42-4bd9-9192-260b93307b4b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=62da7e85ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1361 identity=3474 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j68hg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 8beb185e-bffc-4791-8199-2bc7acebec1d default }" containerID=fbad0b6d346a478b84d43948af3d50b5300c1f865b496d4a65147a52db49ca82 datapathConfiguration="&{false false false false false }" interface=lxc5354f12c21f8 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbad0b6d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbad0b6d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fbad0b6d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbad0b6d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=39916 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbad0b6d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=39916 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbad0b6d34 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=756 identity=39916 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbad0b6d34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=756 identity=39916 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-f7hvx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.241 97f50dae-f15f-40f9-8733-c8aad5133f0e default }" containerID=3d792b61dcb5dea7f51777f6b49a84ccf2d3975713e216e8e628114e7ee97bb6 datapathConfiguration="&{false false false false false }" interface=lxcaee45e32c675 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d792b61dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d792b61dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d792b61dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=751 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d792b61dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=751 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d792b61dc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1310 identity=751 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d792b61dc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1310 identity=751 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d792b61dc endpointID=1310 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-j5s9w subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=00771554-c1fd-4cc5-a418-87dc23cfddfa k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=3d792b61dc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1310 identity=751 ipv4=10.0.0.241 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j5s9w subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4709e34a-778b-494d-89d9-336c670602b6] Description:}]" policyAddRequest=f0624842-e4a6-40ab-b283-87d053c8ffdf subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f0624842-e4a6-40ab-b283-87d053c8ffdf policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=eff305ff-d9a1-450f-9b54-d9bc7222bc58] Description:}]" policyAddRequest=fbe3341b-6e27-4807-a9d4-41171fb77b4b subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=fbe3341b-6e27-4807-a9d4-41171fb77b4b policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 11f898f8-6c3a-4fa3-9983-2adb5bc6cd0f default }" containerID=2183f62dbdf37eb84877e8797c34d80ce78a71c97c332b5434803fd747d5cca4 datapathConfiguration="&{false false false false false }" interface=lxc8a858777f386 k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b6h6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2183f62dbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b6h6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2183f62dbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b6h6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2183f62dbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=40654 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b6h6q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2183f62dbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=40654 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b6h6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2183f62dbd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=939 identity=40654 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b6h6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=2183f62dbd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=939 identity=40654 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b6h6q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 59313978-1d54-4baf-aee4-877a41e4fdc7 default }" containerID=3f5142ec201f0b2a5002c0002206154176cb7e3a47a7c717cb50ced5aef68c84 datapathConfiguration="&{false false false false false }" interface=lxc6713a803897f k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mfx9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f5142ec20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mfx9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f5142ec20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mfx9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f5142ec20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=5109 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mfx9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f5142ec20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=5109 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mfx9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f5142ec20 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3056 identity=5109 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mfx9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f5142ec20 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3056 identity=5109 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-mfx9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 5b48d7c6-8907-44d2-92d1-018df2c8f0d2 default }" containerID=261a89606390ec304d61e20b26e97f252419d672bd5e68d93447689d95344cc0 datapathConfiguration="&{false false false false false }" interface=lxcc1fbff95dc9d k8sPodName=openstack/pxc-operator-7cff949c8b-8htds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=261a896063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8htds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=261a896063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8htds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=261a896063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8htds line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=261a896063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=32943 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8htds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=261a896063 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=32943 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8htds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=261a896063 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1330 identity=32943 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8htds subsys=endpoint level=info msg="Successful endpoint creation" containerID=261a896063 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1330 identity=32943 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-8htds subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 95985d8a-2f74-47c4-8adc-65935d95f35a default }" containerID=7d19f3c2695f39b1d1d9cffba352c4dc4230862c5ac6b70d29820db7aa5e0b58 datapathConfiguration="&{false false false false false }" interface=lxcfa24fca03f1c k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d19f3c269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d19f3c269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d19f3c269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d19f3c269 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=64784 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 5d80ff96-13d9-4930-add0-7083910d1ee9 default }" containerID=c2a133580232e3554b5909e67dbfe6da90d8b0db98b009e1663b14868af7e307 datapathConfiguration="&{false false false false false }" interface=lxcc384d332194f k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2a1335802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2a1335802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2a1335802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identity=20625 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2a1335802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identity=20625 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d19f3c269 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=960 identity=64784 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d19f3c269 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=960 identity=64784 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2a1335802 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1014 identity=20625 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2a1335802 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1014 identity=20625 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d19f3c269 endpointID=960 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7d19f3c269 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=960 identity=64784 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-edaf3304-e300-4133-b5ac-6c9891207a99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 be4863e3-b946-4da4-8835-e52822c48e84 default }" containerID=aab48623e47c297e9281998062b092dbc4b6b0c04789b2c0d81ee825b5569818 datapathConfiguration="&{false false false false false }" interface=lxca40c79e1af02 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aab48623e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aab48623e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aab48623e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=43846 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aab48623e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=154 identity=43846 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aab48623e4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=154 identity=43846 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aab48623e4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=154 identity=43846 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c0744f77-074b-43d7-a8e1-94435be95a3c] Description:}]" policyAddRequest=e8a7c983-284b-4b91-a0d4-5a8571a21cca subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e8a7c983-284b-4b91-a0d4-5a8571a21cca policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.196 a28f5875-3c46-4387-aa31-7401035798a9 default }" containerID=779eca83591f29f04697163c3217bdceba4852af579da0e4ab5489f6e8e3fccb datapathConfiguration="&{false false false false false }" interface=lxc85b9129f8d75 k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=779eca8359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=779eca8359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=779eca8359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=779eca8359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2200 identity=64784 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=779eca8359 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2200 identity=64784 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 subsys=endpoint level=info msg="Successful endpoint creation" containerID=779eca8359 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2200 identity=64784 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 subsys=daemon level=info msg="Delete endpoint request" containerID=779eca8359 endpointID=2200 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=779eca8359 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2200 identity=64784 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41b01a56-4a50-4201-ba3d-da794fcfb237 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 3a13a9c6-ed8f-4080-9dcf-9b0f3485503e default }" containerID=08046c32e79060c464a05c385bbe3d6f2f1e844f26492a9fd524b99b3b1323df datapathConfiguration="&{false false false false false }" interface=lxc174679c01412 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08046c32e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08046c32e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08046c32e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=60379 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=08046c32e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=60379 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08046c32e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3494 identity=60379 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08046c32e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3494 identity=60379 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=921c6c45-8bcb-48cd-b743-6434c24545dd] Description:}]" policyAddRequest=d70030a6-d042-4529-be94-398560d4e735 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=d70030a6-d042-4529-be94-398560d4e735 policyRevision=5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 bd7b7583-d7d5-47fd-844d-0ad5cccc6dde default }" containerID=34bbf2b6e1407c76768c4ec31afe5848401e7b84dfab87a9ffeb2758a50f11a7 datapathConfiguration="&{false false false false false }" interface=lxccfc3b36e9833 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34bbf2b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 ipv4=10.0.0.234 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34bbf2b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.234 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34bbf2b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=49150 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.234 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34bbf2b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=49150 ipv4=10.0.0.234 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34bbf2b6e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2196 identity=49150 ipv4=10.0.0.234 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34bbf2b6e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2196 identity=49150 ipv4=10.0.0.234 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009729192311334154 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.137 ba02f580-2eae-4708-8fe1-a1e570e1965d default }" containerID=7610ef64fbac7fedfbbfc206c82e7ef3632e81e05cd38e794c0c7590921f5074 datapathConfiguration="&{false false false false false }" interface=lxc2dbbadcb952f k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cb2f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7610ef64fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cb2f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 ce80275c-0bc3-416f-a2be-bf78f27ab822 default }" containerID=04a23b68edb0dcdb0caadf04c133aeeb6adffa9e46eb61e379dde5896cdc0bfa datapathConfiguration="&{false false false false false }" interface=lxc653a264887c4 k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04a23b68ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7610ef64fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cb2f9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=04a23b68ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7610ef64fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=18124 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cb2f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7610ef64fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=18124 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cb2f9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=04a23b68ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04a23b68ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=41296 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04a23b68ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=41296 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 4cc2d82a-3e14-4905-9b86-2533abfd75f2 default }" containerID=f119621aba087a47d5bc723ddb1bce62a6c6b4ac9baf4f9f0992b8215f85d7ec datapathConfiguration="&{false false false false false }" interface=lxc151ae395ba5a k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bmdpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f119621aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bmdpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f119621aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bmdpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f119621aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=61172 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bmdpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f119621aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=61172 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bmdpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7610ef64fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1813 identity=18124 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cb2f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7610ef64fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1813 identity=18124 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cb2f9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=04a23b68ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1653 identity=41296 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04a23b68ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1653 identity=41296 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kxcr2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f119621aba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=14 identity=61172 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bmdpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f119621aba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=14 identity=61172 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bmdpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 1ded3bec-0335-40b0-96d7-0600b1910a4e default }" containerID=82c2051681c5bc96715f7f43aa1842501f6777bce407e5d6d8ef7fca98454ebf datapathConfiguration="&{false false false false false }" interface=lxcade31adc2e77 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vbxrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82c2051681 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2219 ipv4=10.0.0.105 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vbxrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82c2051681 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2219 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.105 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vbxrn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82c2051681 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2219 identity=40386 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.105 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vbxrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82c2051681 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2219 identity=40386 ipv4=10.0.0.105 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vbxrn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82c2051681 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2219 identity=40386 ipv4=10.0.0.105 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vbxrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=82c2051681 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2219 identity=40386 ipv4=10.0.0.105 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vbxrn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1641 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01641 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01641 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01641:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1641 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 7768e132-d705-46c0-a7a0-8f08ca4d6c34 default }" containerID=a51ace173627f888aa97bd1518a08fe4dfc72badf168fb44feebf5d2e3c1937d datapathConfiguration="&{false false false false false }" interface=lxce659cfc3610b k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a51ace1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a51ace1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a51ace1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 identity=64802 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a51ace1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4014 identity=64802 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a51ace1736 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4014 identity=64802 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a51ace1736 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4014 identity=64802 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a51ace1736 endpointID=4014 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-2cdgz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3fcd12ea-6aaf-4ba1-a74d-56291b6fef30 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a51ace1736 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4014 identity=64802 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2cdgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 18e33e81-605a-4792-a350-448c008a58b8 default }" containerID=3677c0fa17c54d13d538543779aafb138e96d81867ab9e07f7292b24aeb038bd datapathConfiguration="&{false false false false false }" interface=lxc7ed8927a7dfc k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x2cx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3677c0fa17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x2cx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3677c0fa17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x2cx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3677c0fa17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=39111 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x2cx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3677c0fa17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=39111 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x2cx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 4c5ae737-0d02-4229-957d-69f37cf6058b default }" containerID=ea1fe38e2241619d76a727aa1eb884d3f43b555134043d370cc9ef3b879fcc0d datapathConfiguration="&{false false false false false }" interface=lxc5a1d9cfd8509 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pp8k5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea1fe38e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pp8k5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea1fe38e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pp8k5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea1fe38e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identity=54089 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pp8k5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea1fe38e22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identity=54089 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pp8k5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3677c0fa17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1319 identity=39111 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x2cx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3677c0fa17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1319 identity=39111 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x2cx9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 08108215-9c34-4d42-8bfc-44190d76a9ac default }" containerID=e40d5f26260240b3f5b0c69cab2f69f066b2ed558a8276da96dc1ad102abc6bf datapathConfiguration="&{false false false false false }" interface=lxce12f11b80165 k8sPodName=monitoring/kube-prometheus-stack-grafana-87d6b656f-vb75c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e40d5f2626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1363 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-87d6b656f-vb75c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e40d5f2626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1363 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-87d6b656f-vb75c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e40d5f2626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1363 identity=30462 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-87d6b656f-vb75c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e40d5f2626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1363 identity=30462 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-87d6b656f-vb75c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea1fe38e22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1817 identity=54089 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pp8k5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea1fe38e22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1817 identity=54089 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-pp8k5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e40d5f2626 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1363 identity=30462 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-87d6b656f-vb75c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e40d5f2626 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1363 identity=30462 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-87d6b656f-vb75c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 c05ef71e-7fa4-401b-b969-78c20e536f5f default }" containerID=bf677a9ca196771690a6c227ccf0b5174e3cc893b52c8f165b6cfbba1d7bca67 datapathConfiguration="&{false false false false false }" interface=lxcb2ba1be13c7b k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf677a9ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf677a9ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf677a9ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=8647 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf677a9ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=220 identity=8647 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf677a9ca1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=220 identity=8647 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf677a9ca1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=8647 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 b0ba6254-fa2e-4b23-821c-2b24728a4750 default }" containerID=b0c2c79b1c9075e5905a4e379b46544a5f3adb6fb278b2eee3d8f9a62dfa71ec datapathConfiguration="&{false false false false false }" interface=lxc2ea1eb363cd7 k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0c2c79b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0c2c79b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0c2c79b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0c2c79b1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2145 identity=64784 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 13cef5b9-a6f0-483f-8be6-dbbed77e9c37 default }" containerID=c42c77f641231df6018e07a1f7f4774ebd95d16419cac1731e8c06b6498d9d07 datapathConfiguration="&{false false false false false }" interface=lxcb673b83b11f3 k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c42c77f641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c42c77f641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c42c77f641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c42c77f641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=64784 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0c2c79b1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2145 identity=64784 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0c2c79b1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2145 identity=64784 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c42c77f641 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1414 identity=64784 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c42c77f641 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1414 identity=64784 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f subsys=daemon level=info msg="Delete endpoint request" containerID=bf677a9ca1 endpointID=220 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-6v422 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0877084e-4f48-49fd-9ea3-d4288ef33fac k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=bf677a9ca1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=220 identity=8647 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6v422 subsys=endpoint level=info msg="Delete endpoint request" containerID=c42c77f641 endpointID=1414 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=b0c2c79b1c endpointID=2145 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c42c77f641 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1414 identity=64784 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ce861c87-b396-4923-9186-6bbbe765fa0f subsys=endpoint level=info msg="Removed endpoint" containerID=b0c2c79b1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2145 identity=64784 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-215be23b-43f3-4b2f-8a20-3fc484780622 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 2279ee13-f204-4488-80d5-6882348cdfbe default }" containerID=a3d42c0fd5553efdf9dcdf1ffc9cb2d17aa7a7dd17b9702e65b7916df93e37ad datapathConfiguration="&{false false false false false }" interface=lxc24b2974ae15e k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3d42c0fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3d42c0fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3d42c0fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=5917 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3d42c0fd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=5917 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a3d42c0fd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=737 identity=5917 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3d42c0fd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=737 identity=5917 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 ce187346-28ec-4d67-acd7-7e1fe5c5499a default }" containerID=1354531e42adef8fae1c4161988d9aac286fb3af5bfd70ee2e33e20341d2a428 datapathConfiguration="&{false false false false false }" interface=lxcde913f7f4b64 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1354531e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1354531e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1354531e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=1727 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1354531e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=1727 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1354531e42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=97 identity=1727 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1354531e42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=1727 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 f45ec40f-efad-4357-8898-1aef61edf08d default }" containerID=0d0336fcfe01d0a38643a6487e5067b3b8008914c73f6e523e1fea27a8d22b58 datapathConfiguration="&{false false false false false }" interface=lxc79afe07198ad k8sPodName=monitoring/loki-gateway-cf54cb88c-lvtlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d0336fcfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lvtlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d0336fcfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lvtlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d0336fcfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=59827 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lvtlt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d0336fcfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=59827 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lvtlt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d0336fcfe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3275 identity=59827 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lvtlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d0336fcfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3275 identity=59827 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-lvtlt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 f88a8700-539f-4e64-88eb-d4f620da07aa default }" containerID=a2a63a794f8d360aa5c913308d5025a51fe856ba81c2a4490c770401196fa66e datapathConfiguration="&{false false false false false }" interface=lxcfdae29e4155a k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2a63a794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1825 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2a63a794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1825 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.74 816821ba-d28d-4160-877d-58d880979bd1 default }" containerID=8d235e9617d9ca4d20fa32565150a0483f9e9d0082d07f96157ceb79442d7651 datapathConfiguration="&{false false false false false }" interface=lxc78422fedfc48 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d235e9617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d235e9617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2a63a794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1825 identity=19680 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2a63a794f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1825 identity=19680 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d235e9617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=31596 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d235e9617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=31596 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 7c602807-46d2-4a1f-ad4c-051a87a48b36 default }" containerID=4d6abac0459dbd2fa3d1c5dd8346186d81bcf938eabe7776497d5a0384f3e86e datapathConfiguration="&{false false false false false }" interface=lxcaf0d0753b243 k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d6abac045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d6abac045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d6abac045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d6abac045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4012 identity=64784 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2a63a794f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1825 identity=19680 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2a63a794f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1825 identity=19680 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d235e9617 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=676 identity=31596 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d235e9617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=676 identity=31596 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d6abac045 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4012 identity=64784 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d6abac045 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4012 identity=64784 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 36ec4dff-1d3a-48cb-8a72-a0c0f0216195 default }" containerID=1af2292a0928ff0f8a16cc799d17b9efc51e92f34e9abb82bcd9d189a7a814b9 datapathConfiguration="&{false false false false false }" interface=lxcf47a9bed1352 k8sPodName=monitoring/vector-c4lp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1af2292a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/vector-c4lp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1af2292a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/vector-c4lp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1af2292a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=61276 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/vector-c4lp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1af2292a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=61276 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/vector-c4lp2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1af2292a09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1431 identity=61276 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/vector-c4lp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1af2292a09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1431 identity=61276 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/vector-c4lp2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d6abac045 endpointID=4012 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4d6abac045 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4012 identity=64784 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2c973131-c8aa-43f8-9b7f-ddfe60abdad6 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 55718881-e3ad-4f2b-8e40-64b604df46ac default }" containerID=7cef1607c9b30b38b621e812bf3d3f8b09ec8b387e74395167061ed51182c1e3 datapathConfiguration="&{false false false false false }" interface=lxce78d9690edf6 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cef1607c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cef1607c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cef1607c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=37202 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7cef1607c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=37202 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cef1607c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3956 identity=37202 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cef1607c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3956 identity=37202 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.82 15a85755-ab9a-4bd7-80ed-8724a2bc15e3 default }" containerID=3fd730c9f6b94f527ee0541a91a9ccbc04629586f959a1f1324d20286329e91c datapathConfiguration="&{false false false false false }" interface=lxc658e0a9b7506 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkshq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fd730c9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkshq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fd730c9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkshq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fd730c9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=44020 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkshq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fd730c9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=44020 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkshq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3fd730c9f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=990 identity=44020 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkshq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fd730c9f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=990 identity=44020 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kkshq subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 6ff6f144-dc46-4928-a26b-bdc1c51dab17 default }" containerID=32a600395733150558c6c46508ee3a18d5a9d116aa57cd8bf31b21bc6441a4c6 datapathConfiguration="&{false false false false false }" interface=lxca584808ee0b4 k8sPodName=openstack/memcached-memcached-6479589586-blgmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32a6003957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-blgmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32a6003957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-blgmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32a6003957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=14574 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-blgmm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=32a6003957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=14574 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-blgmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32a6003957 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3793 identity=14574 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-blgmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=32a6003957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3793 identity=14574 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-blgmm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 36cc3479-1b63-46a8-b77b-c2efddb9073d default }" containerID=b6d0d6a06b71a5161cbeece809cb7070f7709e80d1a6bedbfa47b0cdb9198f1d datapathConfiguration="&{false false false false false }" interface=lxcf46846785620 k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6d0d6a06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6d0d6a06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6d0d6a06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6d0d6a06b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=64784 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6d0d6a06b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=64784 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6d0d6a06b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=64784 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c subsys=daemon level=info msg="Delete endpoint request" containerID=b6d0d6a06b endpointID=124 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b6d0d6a06b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=64784 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-999f6a33-5d34-45ba-9980-bf3d37f46e4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 494e11f2-9df6-4c05-accc-c59315f88476 default }" containerID=15a78d3881a957de58fac0d488105dc22dd4779c41656d5b6ca1509703be1871 datapathConfiguration="&{false false false false false }" interface=lxce9d0aa402933 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15a78d3881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15a78d3881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15a78d3881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=21541 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=15a78d3881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=21541 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15a78d3881 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=18 identity=21541 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15a78d3881 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=18 identity=21541 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 5a0c9791-9517-4df7-a7d8-f58aa1740adf default }" containerID=a5095a3e53c5280074117ea8777d9e3037227f673b3a1d3b5036d886e8c60c31 datapathConfiguration="&{false false false false false }" interface=lxcda217a46abe8 k8sPodName=openstack/keystone-api-7f7958b4f6-b8dcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5095a3e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f7958b4f6-b8dcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5095a3e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f7958b4f6-b8dcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5095a3e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=5558 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f7958b4f6-b8dcb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a5095a3e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=5558 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f7958b4f6-b8dcb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 029ffb17-8407-4a26-bf65-77f16ac73023 default }" containerID=6431aef05b6811044e8c340cc008897a8a4eabbd7a89a91f29f9333bdc954cfa datapathConfiguration="&{false false false false false }" interface=lxc5bb686257013 k8sPodName=openstack/keystone-credential-setup-gdnsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6431aef05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-credential-setup-gdnsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6431aef05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-credential-setup-gdnsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6431aef05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=4942 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-credential-setup-gdnsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6431aef05b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=4942 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-credential-setup-gdnsj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5095a3e53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1806 identity=5558 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f7958b4f6-b8dcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5095a3e53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=5558 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-api-7f7958b4f6-b8dcb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6431aef05b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1625 identity=4942 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-credential-setup-gdnsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6431aef05b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=4942 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-credential-setup-gdnsj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6431aef05b endpointID=1625 k8sNamespace=openstack k8sPodName=keystone-credential-setup-gdnsj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e959ec75-e56f-4ebe-95c7-ff0732d57f22 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6431aef05b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=4942 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/keystone-credential-setup-gdnsj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 2e48ec61-5954-4731-b059-d3f9b0518010 default }" containerID=139cc419507f81eb7c1f7b15cc3edebea1fa73d3ad4b9196af5f98a5ed336f54 datapathConfiguration="&{false false false false false }" interface=lxc20f5b3a35aaf k8sPodName=openstack/keystone-db-init-nwd6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=139cc41950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3872 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=139cc41950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3872 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=139cc41950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3872 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=139cc41950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3872 identity=3615 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=139cc41950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3872 identity=3615 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=139cc41950 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3872 identity=3615 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=139cc41950 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3872 identity=3615 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=139cc41950 endpointID=3872 k8sNamespace=openstack k8sPodName=keystone-db-init-nwd6t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=1f73cfe8-919b-46c7-97b4-692353304fe4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=139cc41950 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3872 identity=3615 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-nwd6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 6e55e42c-e6bb-442d-8c5d-47f9f26010a9 default }" containerID=954c47f581ecbf5f761f6dffefea5853e2c242f60da9c4d79aeb117e769deb11 datapathConfiguration="&{false false false false false }" interface=lxc094b0f3f49c4 k8sPodName=openstack/keystone-fernet-setup-x2g6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=954c47f581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2g6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=954c47f581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2g6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=954c47f581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identity=27531 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2g6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=954c47f581 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identity=27531 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2g6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=954c47f581 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3006 identity=27531 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2g6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=954c47f581 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3006 identity=27531 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2g6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=954c47f581 endpointID=3006 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-x2g6q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9175819b-4060-4f96-bb4d-2250a4e83634 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=954c47f581 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3006 identity=27531 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2g6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 3ed30df6-d151-4f91-9ebc-df6f71c2ef4a default }" containerID=ed04cf4abd6ca9c962ba3d6b505b95e170f4008adab8e86ecaa7e7ede249b858 datapathConfiguration="&{false false false false false }" interface=lxcb7aea5eba4af k8sPodName=openstack/keystone-db-sync-jgh5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed04cf4abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-jgh5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed04cf4abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-jgh5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed04cf4abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identity=36620 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-jgh5t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ed04cf4abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3945 identity=36620 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-jgh5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed04cf4abd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3945 identity=36620 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-jgh5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed04cf4abd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3945 identity=36620 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-jgh5t subsys=daemon level=info msg="Delete endpoint request" containerID=ed04cf4abd endpointID=3945 k8sNamespace=openstack k8sPodName=keystone-db-sync-jgh5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=a62d32c0-78c8-486a-9d30-0cbf2150c428 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ed04cf4abd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3945 identity=36620 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-jgh5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 efad611e-3664-4085-a0c6-43d57d651406 default }" containerID=343d1fd73a2e171cbfdcd53b13bf437aa9d49f1c153181fd41db68e3704612bb datapathConfiguration="&{false false false false false }" interface=lxca7fa19078350 k8sPodName=openstack/keystone-rabbit-init-v72h4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=343d1fd73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-rabbit-init-v72h4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=343d1fd73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-rabbit-init-v72h4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=343d1fd73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identity=46131 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-rabbit-init-v72h4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=343d1fd73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identity=46131 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-rabbit-init-v72h4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=343d1fd73a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2458 identity=46131 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-rabbit-init-v72h4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=343d1fd73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2458 identity=46131 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-rabbit-init-v72h4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=343d1fd73a endpointID=2458 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-v72h4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2b28b966-b97c-48fa-8d66-73ad4abe7ca9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=343d1fd73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2458 identity=46131 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-rabbit-init-v72h4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 020fd5ab-7521-44e2-b7e0-4039dd580bc1 default }" containerID=d72ace637c626e21839bdeaa1c46eed45e8bd906b744c254dfd964d786761339 datapathConfiguration="&{false false false false false }" interface=lxcaaedd9bbc38f k8sPodName=openstack/keystone-domain-manage-6b9pg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d72ace637c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-domain-manage-6b9pg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d72ace637c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-domain-manage-6b9pg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d72ace637c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=12336 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-domain-manage-6b9pg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d72ace637c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=12336 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-domain-manage-6b9pg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d72ace637c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=204 identity=12336 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-domain-manage-6b9pg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d72ace637c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=204 identity=12336 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-domain-manage-6b9pg subsys=daemon level=info msg="Delete endpoint request" containerID=d72ace637c endpointID=204 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6b9pg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=c3efbe21-7bed-4ebd-8f9c-0652c7650981 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d72ace637c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=204 identity=12336 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-domain-manage-6b9pg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 3b2610a1-5482-42d0-9ff9-ae3f227a491e default }" containerID=5773bf4cb0ad75d1da6b8794732128f18bd209017a293f3c52fc49d32e368af6 datapathConfiguration="&{false false false false false }" interface=lxcd7cb58bd143e k8sPodName=openstack/keystone-bootstrap-tplkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5773bf4cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5773bf4cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5773bf4cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5773bf4cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=39542 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5773bf4cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=39542 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5773bf4cb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1229 identity=39542 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5773bf4cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1229 identity=39542 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5773bf4cb0 endpointID=1229 k8sNamespace=openstack k8sPodName=keystone-bootstrap-tplkj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=5db3a70b-d53e-4e19-8c7e-a9f4ef0c85e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5773bf4cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1229 identity=39542 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-bootstrap-tplkj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 813f28a3-e027-4d97-9039-6d1383bd79cc default }" containerID=2983afd849bda72f1c20a2e7ac7a53f65536f5d262ac4b32018a223ca1dc7890 datapathConfiguration="&{false false false false false }" interface=lxcbf1b3e28a956 k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2983afd849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2983afd849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2983afd849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2983afd849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identity=64784 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2983afd849 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1864 identity=64784 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d subsys=endpoint level=info msg="Successful endpoint creation" containerID=2983afd849 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1864 identity=64784 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d subsys=daemon level=info msg="Delete endpoint request" containerID=2983afd849 endpointID=1864 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2983afd849 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1864 identity=64784 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40608b94-68a6-4202-91ed-49ccb396d02d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 347da531-b794-4043-bdd6-afbe1085339e default }" containerID=3161a3e14f2f1c0fa5503a92a3344d0069ca3fae8049bb9f143983eb49b09941 datapathConfiguration="&{false false false false false }" interface=lxcd8994584b05a k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3161a3e14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3161a3e14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3161a3e14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3161a3e14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=38096 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3161a3e14f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=38096 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3161a3e14f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1510 identity=38096 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3161a3e14f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1510 identity=38096 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 22940a95-36cd-4939-ae0c-f666bc643076 default }" containerID=46ea96fb273ac80609a4fcc8ea0f2b067326f777586ae467322317c39f57257b datapathConfiguration="&{false false false false false }" interface=lxc9ddaca53d848 k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46ea96fb27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46ea96fb27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46ea96fb27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46ea96fb27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identity=5902 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46ea96fb27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3443 identity=5902 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 eb59084a-dc87-409d-b1fb-5c0d20b4314c default }" containerID=2f4ecd5b77adab21c95963863627547c7eca8e5a24c900a4964cb03221ad73af datapathConfiguration="&{false false false false false }" interface=lxc8abb395884c4 k8sPodName=openstack/barbican-db-init-q8l64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f4ecd5b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-q8l64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f4ecd5b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7dbe3ae-085c-4412-8531-c49102454077,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a7dbe3ae-085c-4412-8531-c49102454077,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-q8l64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a7dbe3ae-085c-4412-8531-c49102454077;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a7dbe3ae-085c-4412-8531-c49102454077;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f4ecd5b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identity=40548 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7dbe3ae-085c-4412-8531-c49102454077,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a7dbe3ae-085c-4412-8531-c49102454077,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-q8l64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f4ecd5b77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2178 identity=40548 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-q8l64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46ea96fb27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3443 identity=5902 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=46ea96fb27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3443 identity=5902 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/barbican-api-7d68f97bc5-g9rgr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2f4ecd5b77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2178 identity=40548 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-q8l64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f4ecd5b77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2178 identity=40548 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-q8l64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2f4ecd5b77 endpointID=2178 k8sNamespace=openstack k8sPodName=barbican-db-init-q8l64 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a7dbe3ae-085c-4412-8531-c49102454077 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a7dbe3ae-085c-4412-8531-c49102454077 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2f4ecd5b77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2178 identity=40548 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-q8l64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 895d112e-3f46-412f-8a81-c609c1237bb0 default }" containerID=c926da3b081a2ea98576753cf122f5297e36b72efab184420ecdddf19251743a datapathConfiguration="&{false false false false false }" interface=lxcc2a0fa1e84c5 k8sPodName=openstack/barbican-db-sync-dfqpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c926da3b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-db-sync-dfqpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c926da3b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-db-sync-dfqpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c926da3b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=47202 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-db-sync-dfqpr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c926da3b08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1050 identity=47202 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-db-sync-dfqpr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c926da3b08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1050 identity=47202 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-db-sync-dfqpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=c926da3b08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1050 identity=47202 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-db-sync-dfqpr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c926da3b08 endpointID=1050 k8sNamespace=openstack k8sPodName=barbican-db-sync-dfqpr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=0312762f-1c45-4e7c-8521-2e0828c67c9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c926da3b08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1050 identity=47202 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-db-sync-dfqpr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 8994f7e9-b74b-4f8a-b2fc-362a45796aa7 default }" containerID=e8069c9fd7557374213709d9c9cbb5b2fbf3ed062cea18f960a738ebb9c385ca datapathConfiguration="&{false false false false false }" interface=lxcbf64d209e096 k8sPodName=openstack/barbican-rabbit-init-xb6pk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8069c9fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-rabbit-init-xb6pk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8069c9fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=312be68b-9e79-4668-93c2-845703becd56,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=312be68b-9e79-4668-93c2-845703becd56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-rabbit-init-xb6pk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=312be68b-9e79-4668-93c2-845703becd56;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=312be68b-9e79-4668-93c2-845703becd56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8069c9fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identity=37425 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=312be68b-9e79-4668-93c2-845703becd56,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=312be68b-9e79-4668-93c2-845703becd56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-rabbit-init-xb6pk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e8069c9fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1054 identity=37425 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-rabbit-init-xb6pk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8069c9fd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1054 identity=37425 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-rabbit-init-xb6pk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8069c9fd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1054 identity=37425 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-rabbit-init-xb6pk subsys=daemon level=info msg="Delete endpoint request" containerID=e8069c9fd7 endpointID=1054 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-xb6pk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=312be68b-9e79-4668-93c2-845703becd56 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=312be68b-9e79-4668-93c2-845703becd56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e8069c9fd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1054 identity=37425 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/barbican-rabbit-init-xb6pk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 fa76a377-7cb5-4b43-8193-2fd14721c8bc default }" containerID=f278b2d300541e8e94a4a5edb0b50eaa3c053bf30d57a8aa68a505e2e740d61e datapathConfiguration="&{false false false false false }" interface=lxce9a192bd3de0 k8sPodName=openstack/barbican-ks-service-tpfrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f278b2d300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f278b2d300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f278b2d300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f278b2d300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=40393 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f278b2d300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1176 identity=40393 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f278b2d300 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1176 identity=40393 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f278b2d300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1176 identity=40393 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036157290299890434 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=f278b2d300 endpointID=1176 k8sNamespace=openstack k8sPodName=barbican-ks-service-tpfrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=b0b56d81-a653-4e6f-a357-9e36783facf0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f278b2d300 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1176 identity=40393 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-tpfrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 a6a231af-ccd4-4266-a089-14667fdfe265 default }" containerID=b37959971564df302f5ea0aa6139f36693c093eeed72620c61dc6b78324b1539 datapathConfiguration="&{false false false false false }" interface=lxcc13017e540b2 k8sPodName=openstack/barbican-ks-endpoints-tsrc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b379599715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b379599715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b379599715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b379599715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=45222 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b379599715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1120 identity=45222 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b379599715 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1120 identity=45222 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b379599715 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1120 identity=45222 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b379599715 endpointID=1120 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-tsrc6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b5ba13ca-fb58-40f2-aa46-2df63c610872 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b379599715 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1120 identity=45222 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tsrc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 b669c736-183f-4698-963b-e7e20d3af56a default }" containerID=1e00884254daff405cd80b295c3517b9cf38ca8686ea107b59ebd19fc7e60638 datapathConfiguration="&{false false false false false }" interface=lxc16d49c02d887 k8sPodName=openstack/barbican-ks-user-kjn7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e00884254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-kjn7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e00884254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-kjn7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e00884254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=28384 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-kjn7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e00884254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=28384 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-kjn7b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1e00884254 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1803 identity=28384 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-kjn7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e00884254 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=28384 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-kjn7b subsys=daemon level=info msg="Delete endpoint request" containerID=1e00884254 endpointID=1803 k8sNamespace=openstack k8sPodName=barbican-ks-user-kjn7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=17e7cd0d-a426-4235-8b5e-dbb5c6105524 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1e00884254 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=28384 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-ks-user-kjn7b subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.244 687db5e8-687e-4f53-b50a-3fc9037eb3b3 default }" containerID=23b41fb49e909e31d661eaef4d701bf793b0750c5ddb92be2b1fa7aa0cd3ed1c datapathConfiguration="&{false false false false false }" interface=lxc442e2678cd07 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23b41fb49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23b41fb49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=23b41fb49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23b41fb49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=2525 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23b41fb49e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1803 identity=2525 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23b41fb49e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1803 identity=2525 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23b41fb49e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1803 identity=2525 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-nxsk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 2890de87-49ce-4518-bdfa-fdc590ee053a default }" containerID=e7d29e2bcc514a83b216ae7602c33aea811129a6047a6da4132f83c9d4d66aef datapathConfiguration="&{false false false false false }" interface=lxc704ea1b85fc7 k8sPodName=openstack/rook-ceph-detect-version-9cb2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d29e2bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d29e2bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7d29e2bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e7d29e2bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=58100 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d29e2bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=58100 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d29e2bcc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=430 identity=58100 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d29e2bcc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=430 identity=58100 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7d29e2bcc endpointID=430 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-9cb2w subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=135b1b79-3bb7-4bd1-a8d6-9b1e2cbfae2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=e7d29e2bcc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=430 identity=58100 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9cb2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 fbad962b-b46a-4708-ad28-e3a9916287f6 default }" containerID=dbc213596f0e338036bb51d728dc0eee36c4f1064639f3bfccbf9db050f3ca5a datapathConfiguration="&{false false false false false }" interface=lxcff4a5dd34018 k8sPodName=openstack/ceph-object-controller-detect-version-988xn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbc213596f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-988xn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbc213596f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-988xn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbc213596f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identity=33430 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-988xn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbc213596f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identity=33430 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-988xn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbc213596f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1936 identity=33430 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-988xn subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbc213596f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1936 identity=33430 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-988xn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 32314870-c81b-41eb-8784-90b8c98a87c9 default }" containerID=ce79f187829d27dc8b9a1a30d74b64b6966d80750abb0f16cb407bc9f9f06bbd datapathConfiguration="&{false false false false false }" interface=lxcb6b081244ff7 k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce79f18782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce79f18782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce79f18782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=64784 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce79f18782 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=64784 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce79f18782 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3745 identity=64784 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce79f18782 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3745 identity=64784 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 subsys=daemon level=info msg="Delete endpoint request" containerID=dbc213596f endpointID=1936 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-988xn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=ff146d62-d58c-4b26-b720-b0ccd2da1fc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=dbc213596f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1936 identity=33430 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-988xn subsys=endpoint level=info msg="Delete endpoint request" containerID=ce79f18782 endpointID=3745 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ce79f18782 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3745 identity=64784 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-920ee51c-4ff5-4978-9d9a-84eefe767906 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 5bd89993-03c1-472a-8e0a-abccb6168c36 default }" containerID=24ba0147b9785acbc050de6473dfe7d850b8ab9b6c7c46c7d2e9b0435171dbea datapathConfiguration="&{false false false false false }" interface=lxc2654eb5d272d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24ba0147b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24ba0147b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=24ba0147b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=8667 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24ba0147b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=8667 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24ba0147b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1230 identity=8667 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=24ba0147b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1230 identity=8667 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.233 a5abced3-7b72-48fd-9de1-9755bd9b0235 default }" containerID=8b7534d16bdbfe8bf3ba5963d53388368da6c9ce1055a62711e81f6a45d9e45f datapathConfiguration="&{false false false false false }" interface=lxcc3143ecd71ae k8sPodName=openstack/glance-db-init-spl4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b7534d16b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-db-init-spl4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b7534d16b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-db-init-spl4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b7534d16b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=16819 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-db-init-spl4g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8b7534d16b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=16819 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-db-init-spl4g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b7534d16b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=16819 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-db-init-spl4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b7534d16b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=16819 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-db-init-spl4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b7534d16b endpointID=152 k8sNamespace=openstack k8sPodName=glance-db-init-spl4g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e0f92dc9-0325-4e69-834d-f969b0ed1af3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8b7534d16b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=16819 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-db-init-spl4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 0149b6e8-3fd1-4923-add2-7cd6959eb63b default }" containerID=77351ca7187aae7a1e30672fec8d082ceca63a19fd20f386a74d024e917e1c44 datapathConfiguration="&{false false false false false }" interface=lxcf5d4a5e81f3d k8sPodName=openstack/glance-db-sync-4mvg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77351ca718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77351ca718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=77351ca718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77351ca718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=34628 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77351ca718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=34628 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77351ca718 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=837 identity=34628 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77351ca718 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=34628 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77351ca718 endpointID=837 k8sNamespace=openstack k8sPodName=glance-db-sync-4mvg9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a16c513f-4866-4b8d-bf9b-eb6e41f91f4d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=77351ca718 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=34628 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/glance-db-sync-4mvg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 8f5d89f9-272b-4517-a9b6-e2f4ad493ca6 default }" containerID=7919cae6750a7c793ab74665a133ede4902994c0fa1ca14f241163f671ed1767 datapathConfiguration="&{false false false false false }" interface=lxcd43967b8e406 k8sPodName=openstack/glance-rabbit-init-4bvvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7919cae675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-4bvvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7919cae675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-4bvvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7919cae675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=515 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-4bvvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7919cae675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=515 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-4bvvj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7919cae675 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=515 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-4bvvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7919cae675 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=515 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-4bvvj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7919cae675 endpointID=663 k8sNamespace=openstack k8sPodName=glance-rabbit-init-4bvvj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ca96e2b1-9c8c-4f71-9acb-72cc3df4a930 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7919cae675 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=515 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-4bvvj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 8d9ee535-2917-409a-b5c4-843e65b23e1f default }" containerID=afc86d566c43aca3b9ecdfd9c74aae4a4a10fc1e295bc6cdf3b9367f972617c2 datapathConfiguration="&{false false false false false }" interface=lxc8fe3715ae149 k8sPodName=openstack/glance-ks-service-lvrpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afc86d566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afc86d566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=afc86d566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afc86d566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 identity=33416 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afc86d566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2489 identity=33416 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afc86d566c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2489 identity=33416 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=afc86d566c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2489 identity=33416 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.213 ac1f3c6c-575b-4beb-940f-37f9c68057d2 default }" containerID=471488b8e73d5c32a609533d43cfe50e52e26eb2773b1fe4cd755b32ee206e34 datapathConfiguration="&{false false false false false }" interface=lxc18edf7522284 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-v8rxx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=471488b8e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-v8rxx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=471488b8e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-v8rxx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=471488b8e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=21457 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-v8rxx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=471488b8e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=810 identity=21457 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-v8rxx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 1cbc1cdf-1fca-4885-83f0-f329ab4f602f default }" containerID=7146e70034473eab5a8d5ce725fa46b2cf176d7976aa32237fc13abf2ef0eb71 datapathConfiguration="&{false false false false false }" interface=lxcaf22b5e8c6d9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rwg5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7146e70034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rwg5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7146e70034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rwg5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7146e70034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identity=20276 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rwg5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7146e70034 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=811 identity=20276 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rwg5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=471488b8e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=810 identity=21457 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-v8rxx subsys=endpoint level=info msg="Successful endpoint creation" containerID=471488b8e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=810 identity=21457 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-v8rxx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7146e70034 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=811 identity=20276 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rwg5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=7146e70034 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=811 identity=20276 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-rwg5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=afc86d566c endpointID=2489 k8sNamespace=openstack k8sPodName=glance-ks-service-lvrpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=1e2ca33e-592c-44d9-8555-c38b5e813daf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=afc86d566c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2489 identity=33416 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-service-lvrpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 bca53232-488a-40e3-a89c-3c500c708cee default }" containerID=e63d931e8761ed4e82ddf7ed03227f2648e23106f3f3a033ea882550b925d734 datapathConfiguration="&{false false false false false }" interface=lxcf0e716fdd8bb k8sPodName=openstack/glance-ks-endpoints-swfpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e63d931e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-endpoints-swfpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e63d931e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-endpoints-swfpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e63d931e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=13532 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-endpoints-swfpp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e63d931e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=13532 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-endpoints-swfpp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e63d931e87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1031 identity=13532 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-endpoints-swfpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e63d931e87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=13532 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-endpoints-swfpp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e63d931e87 endpointID=1031 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-swfpp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3421bc6b-8a47-4c5b-a650-2e3d06738e18 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e63d931e87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=13532 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-endpoints-swfpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 339e7bb9-8349-46d8-842e-2ef8f712d738 default }" containerID=1fbb04db5079b52276ba459dabe2febb2e0e21d7b3c37d27bb2a95240e4faa04 datapathConfiguration="&{false false false false false }" interface=lxc67d1c49e883a k8sPodName=openstack/ceph-object-controller-detect-version-nf2th labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fbb04db50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fbb04db50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1fbb04db50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fbb04db50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=29325 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fbb04db50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3943 identity=29325 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fbb04db50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3943 identity=29325 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fbb04db50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3943 identity=29325 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1fbb04db50 endpointID=3943 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-nf2th subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1d10bda0-fd02-42b8-aaa8-05ccb4d0e346 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=1fbb04db50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3943 identity=29325 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nf2th subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 0576b15b-9e81-4c65-966d-a3e7b23280a3 default }" containerID=e7c948ce88b58e81cd18c1646f9cf8a7b580c82d001704cd57316d73db59e447 datapathConfiguration="&{false false false false false }" interface=lxce1dee9662186 k8sPodName=openstack/glance-ks-user-nlqcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7c948ce88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7c948ce88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7c948ce88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7c948ce88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=13622 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7c948ce88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=591 identity=13622 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7c948ce88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=591 identity=13622 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7c948ce88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=591 identity=13622 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7c948ce88 endpointID=591 k8sNamespace=openstack k8sPodName=glance-ks-user-nlqcr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=c3e3e889-7a72-4aaa-8f38-115480e7fec7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e7c948ce88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=591 identity=13622 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-nlqcr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 62bf41be-1c21-4f1a-93cc-984f762202ad default }" containerID=0bbe8a6a908468789240aa684e3a4df99764785929d6419b87a4152b95aebcfd datapathConfiguration="&{false false false false false }" interface=lxcc6c03bdd10a9 k8sPodName=openstack/glance-metadefs-load-th5dj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bbe8a6a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2299 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-metadefs-load-th5dj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bbe8a6a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2299 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f98157ab-8eca-494d-8d39-9123ee638345,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f98157ab-8eca-494d-8d39-9123ee638345,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-metadefs-load-th5dj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f98157ab-8eca-494d-8d39-9123ee638345;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=f98157ab-8eca-494d-8d39-9123ee638345;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bbe8a6a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2299 identity=21995 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f98157ab-8eca-494d-8d39-9123ee638345,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f98157ab-8eca-494d-8d39-9123ee638345,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-metadefs-load-th5dj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bbe8a6a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2299 identity=21995 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-metadefs-load-th5dj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0bbe8a6a90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2299 identity=21995 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-metadefs-load-th5dj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bbe8a6a90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2299 identity=21995 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-metadefs-load-th5dj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bbe8a6a90 endpointID=2299 k8sNamespace=openstack k8sPodName=glance-metadefs-load-th5dj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f98157ab-8eca-494d-8d39-9123ee638345 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=f98157ab-8eca-494d-8d39-9123ee638345 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0bbe8a6a90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2299 identity=21995 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-metadefs-load-th5dj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 1223eb70-c7c0-44cc-bbd6-03b6a7d4d06d default }" containerID=16af90a2f368e54625a577c3a72af612a02608df7cec096eecf841bf98bac0cf datapathConfiguration="&{false false false false false }" interface=lxc0b5c66fb8369 k8sPodName=openstack/glance-storage-init-p6s8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16af90a2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-p6s8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16af90a2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-p6s8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16af90a2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 identity=31608 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-p6s8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16af90a2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2388 identity=31608 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-p6s8w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=16af90a2f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2388 identity=31608 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-p6s8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=16af90a2f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2388 identity=31608 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-p6s8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=16af90a2f3 endpointID=2388 k8sNamespace=openstack k8sPodName=glance-storage-init-p6s8w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=0739bf2d-c8ec-4c57-827d-646dbe6ce4b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=16af90a2f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2388 identity=31608 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-p6s8w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 3eaf428d-854b-4d63-bdfd-14aadc0ce57f default }" containerID=54301b46211af40b35a31fad3854ab79e993d9c4dfbba09f7d42cae5f0be2d45 datapathConfiguration="&{false false false false false }" interface=lxc33f72c4635c5 k8sPodName=openstack/glance-api-5d6458b987-w48ww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54301b4621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-5d6458b987-w48ww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54301b4621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-5d6458b987-w48ww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=54301b4621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-5d6458b987-w48ww line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54301b4621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=28481 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-5d6458b987-w48ww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54301b4621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=28481 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-5d6458b987-w48ww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54301b4621 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3687 identity=28481 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-5d6458b987-w48ww subsys=endpoint level=info msg="Successful endpoint creation" containerID=54301b4621 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3687 identity=28481 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-api-5d6458b987-w48ww subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 20f23c23-1303-4230-b53f-40c299d54d6f default }" containerID=26f6918cad8af98d869d8043f16829a9bd529043c2986e3d3a0dbfc21ce34953 datapathConfiguration="&{false false false false false }" interface=lxc6f3626db59aa k8sPodName=openstack/staffeln-conductor-596bc8d8d4-lvqxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26f6918cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-596bc8d8d4-lvqxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26f6918cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-596bc8d8d4-lvqxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26f6918cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=30422 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-596bc8d8d4-lvqxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26f6918cad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=30422 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-596bc8d8d4-lvqxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26f6918cad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2675 identity=30422 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-596bc8d8d4-lvqxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=26f6918cad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2675 identity=30422 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-596bc8d8d4-lvqxm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 32df73d2-7082-4f3f-a918-3f61667723a3 default }" containerID=deab5496e7dd1f56d40f20aa083ed7b943617f8c6722ff5e7d064d537ce94692 datapathConfiguration="&{false false false false false }" interface=lxc324a0ee529f9 k8sPodName=openstack/staffeln-api-5d98b5df47-xdpnv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.155 6ae93d9e-7532-49ed-8866-8b496c4381b1 default }" containerID=daff06d0e95e997bc34ce88abe0af3ef404ff8b20993951d3e063657c7964bec datapathConfiguration="&{false false false false false }" interface=lxc71120cc6e9e0 k8sPodName=openstack/staffeln-db-init-kvg9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daff06d0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-init-kvg9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daff06d0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-init-kvg9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=deab5496e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-api-5d98b5df47-xdpnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=deab5496e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-api-5d98b5df47-xdpnv subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daff06d0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identity=8965 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-init-kvg9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daff06d0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identity=8965 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-init-kvg9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=deab5496e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=9453 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-api-5d98b5df47-xdpnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=deab5496e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=9453 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-api-5d98b5df47-xdpnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=deab5496e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=65 identity=9453 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-api-5d98b5df47-xdpnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=deab5496e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=65 identity=9453 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-api-5d98b5df47-xdpnv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=daff06d0e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2396 identity=8965 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-init-kvg9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=daff06d0e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2396 identity=8965 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-init-kvg9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=daff06d0e9 endpointID=2396 k8sNamespace=openstack k8sPodName=staffeln-db-init-kvg9s subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=070f7a98-83e5-448d-9e86-ce296ea373e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=daff06d0e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2396 identity=8965 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-init-kvg9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 d81d6c47-3fe0-4cec-bfb9-cc109985b63d default }" containerID=4fee1ec82115392abe3366446a66f86e59ba26dc16caf57670c8988a110cf15c datapathConfiguration="&{false false false false false }" interface=lxc4b440147a33f k8sPodName=openstack/staffeln-db-sync-5hg4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fee1ec821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/staffeln-db-sync-5hg4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fee1ec821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ab7e4c63-92a1-4ce5-9fe1-59b87d78a96d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ab7e4c63-92a1-4ce5-9fe1-59b87d78a96d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/staffeln-db-sync-5hg4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4fee1ec821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/staffeln-db-sync-5hg4w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ab7e4c63-92a1-4ce5-9fe1-59b87d78a96d;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=ab7e4c63-92a1-4ce5-9fe1-59b87d78a96d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fee1ec821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=23832 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ab7e4c63-92a1-4ce5-9fe1-59b87d78a96d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ab7e4c63-92a1-4ce5-9fe1-59b87d78a96d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/staffeln-db-sync-5hg4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fee1ec821 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=23832 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/staffeln-db-sync-5hg4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fee1ec821 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2176 identity=23832 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/staffeln-db-sync-5hg4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fee1ec821 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=23832 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/staffeln-db-sync-5hg4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager