level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.128778ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="70.882µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.22296ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.881µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.959386ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.75µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.96µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.192µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.552µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="83.842µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="461.711µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.21µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.880625ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.767648ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="57.041µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="42.121µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="246.326µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="198.775µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="84.102µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.258603ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="93.332µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.5.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.468232ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=103.56881ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.191µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.003317ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="10.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="29.18µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.59µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.031µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="288.277µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.2µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="188.265µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="903.142µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.041216ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.66µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.45µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.5 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.5 ipAddr.ipv6="" k8sNodeIP=199.19.213.5 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.5" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.236" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.5" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.5} {CiliumInternalIP 10.0.0.236}] 10.0.0.0/24 [] [] 10.0.0.165 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38663" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.624646552s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="26.811µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="9.95µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="78.772µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="35.461µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.620002201s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=326.551755ms file-path=/var/run/cilium/state/templates/7467de242b231c7b328d9d206dc1fbf96715261bb074e77baca3de4ba54404d2/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3440 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1208 ipv4=10.0.0.165 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1208 identityLabels="reserved:health" ipv4=10.0.0.165 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1208 identity=4 identityLabels="reserved:health" ipv4=10.0.0.165 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.131211258s file-path=/var/run/cilium/state/templates/6a3dbdf8777de8440c88a8cef49ad984fe552930d922f8b8b1ea57fe1766a995/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1208 identity=4 ipv4=10.0.0.165 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 080b642b-71c5-4ee6-a3fd-65e2cfd2f535 default }" containerID=1aac1c3d540a495085a5f4b2c480ff4bb46f4856e13f5ce49541a28c06b59979 datapathConfiguration="&{false false false false false }" interface=lxcf2736afd90da k8sPodName=kube-system/coredns-7c96b6546b-6plj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1aac1c3d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6plj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1aac1c3d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6plj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.4 85a8e2f8-9f00-406e-ac34-918c14ee7a55 default }" containerID=5ac7ea805653532603037adf197f1de0ff921f19bd40edb7f8c0597e9c7ca437 datapathConfiguration="&{false false false false false }" interface=lxcecbab9f0c21b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ac7ea8056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ac7ea8056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1aac1c3d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identity=33159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6plj6 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1aac1c3d54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identity=33159 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6plj6 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5ac7ea8056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ac7ea8056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=9965 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ac7ea8056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=9965 ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1aac1c3d54 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2021 identity=33159 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6plj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1aac1c3d54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2021 identity=33159 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6plj6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5ac7ea8056 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=895 identity=9965 ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ac7ea8056 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=895 identity=9965 ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ac7ea8056 endpointID=895 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-9qc8r subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=3236e05e-f2fc-43af-adf9-533b3becc930 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=5ac7ea8056 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=895 identity=9965 ipv4=10.0.0.4 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9qc8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 09cd8f85-56fc-4f36-9380-69ab1fdb7742 default }" containerID=4e09dceaf13b5bb1e58afa1b924b0536e585c0e51122f37e69af4a3f4e493bad datapathConfiguration="&{false false false false false }" interface=lxc3e206f9a2768 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-49npk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e09dceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-49npk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e09dceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-49npk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e09dceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=3349 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-49npk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e09dceaf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=3349 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-49npk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e09dceaf1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4036 identity=3349 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-49npk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e09dceaf1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4036 identity=3349 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-49npk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3440 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03440 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03440 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03440 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03440:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3440 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 b9465115-68f0-497f-b3de-a09bd4c5ce55 default }" containerID=267065f836578c8990f02c5f5ade239cde1754f1761ed26490740e28cb3754b3 datapathConfiguration="&{false false false false false }" interface=lxc03fd98c1b4b8 k8sPodName=kube-system/coredns-67659f764b-ccmmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=267065f836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-ccmmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=267065f836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-ccmmb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=267065f836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identity=33159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-ccmmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=267065f836 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identity=33159 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-ccmmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 a357a3e9-b1dc-4782-a425-85680f700619 default }" containerID=64ab035ada11834326e3846fb3bb818e65e45ead20cd8c9d31f4b55971e8c013 datapathConfiguration="&{false false false false false }" interface=lxc35a325482d0f k8sPodName=kube-system/coredns-67659f764b-vkr9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64ab035ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-vkr9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64ab035ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-vkr9l subsys=endpoint level=info msg="Identity of endpoint changed" containerID=64ab035ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=33159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-vkr9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64ab035ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=33159 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-vkr9l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=267065f836 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2519 identity=33159 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-ccmmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=267065f836 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2519 identity=33159 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-ccmmb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=64ab035ada datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=221 identity=33159 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-vkr9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=64ab035ada datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=33159 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-vkr9l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 960d07ab-2e91-4345-95a9-6ff1151d86bb default }" containerID=d917db00e30ffba6e14d40aab68ed6c0d9dce650fd8cb447482b411235beab29 datapathConfiguration="&{false false false false false }" interface=lxce16510cb507b k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jmlck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d917db00e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jmlck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d917db00e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jmlck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d917db00e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 identity=47842 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jmlck oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d917db00e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3081 identity=47842 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jmlck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d917db00e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3081 identity=47842 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jmlck subsys=endpoint level=info msg="Successful endpoint creation" containerID=d917db00e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3081 identity=47842 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jmlck subsys=daemon level=info msg="Delete endpoint request" containerID=1aac1c3d54 endpointID=2021 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-6plj6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1aac1c3d54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2021 identity=33159 ipv4=10.0.0.205 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-6plj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 7d7e71e3-1948-46dd-b021-c29180379c7e default }" containerID=0777dc8c55d5753bc04d532c1e9add0fabe494ddd5c8eaac4bd962f095776637 datapathConfiguration="&{false false false false false }" interface=lxcb03e24b1cc1c k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0777dc8c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0777dc8c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0777dc8c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0777dc8c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=10036 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0777dc8c55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=10036 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 58e7e8cd-580a-4f61-8bf2-ec148cc35824 default }" containerID=0cc1062c2b64980102c15f330068d5274c897ba456bca22828eaeb7f43a6ba39 datapathConfiguration="&{false false false false false }" interface=lxce88f35876b6c k8sPodName=cert-manager/cert-manager-75c4c745bc-r448f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cc1062c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r448f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cc1062c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r448f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cc1062c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=8995 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r448f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cc1062c2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=8995 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r448f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0777dc8c55 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2542 identity=10036 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq subsys=endpoint level=info msg="Successful endpoint creation" containerID=0777dc8c55 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2542 identity=10036 ipv4=10.0.0.39 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-cn6vq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0cc1062c2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2213 identity=8995 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r448f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cc1062c2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2213 identity=8995 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r448f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.250 cb3fb3ad-1dbf-47b4-9828-0f16db699e73 default }" containerID=dd7af5af7147174e58b7bfc1b448bbc7d65a41829244237e0cfe4d46e71d2844 datapathConfiguration="&{false false false false false }" interface=lxca2a957b82a11 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z844x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd7af5af71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z844x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd7af5af71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z844x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd7af5af71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=16482 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z844x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd7af5af71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=16482 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z844x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd7af5af71 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=438 identity=16482 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z844x subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd7af5af71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=438 identity=16482 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z844x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 8b304be0-c018-490e-b8aa-4cc3695a63b4 default }" containerID=42e6c3d9ecb26cbc750412d4e780872e708634fadfa1d630d1e06a761949763e datapathConfiguration="&{false false false false false }" interface=lxc9ede3fc73ac5 k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42e6c3d9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42e6c3d9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42e6c3d9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identity=9558 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42e6c3d9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3192 identity=9558 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42e6c3d9ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3192 identity=9558 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd subsys=endpoint level=info msg="Successful endpoint creation" containerID=42e6c3d9ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3192 identity=9558 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42e6c3d9ec endpointID=3192 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-nk2rd subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=aaf8f162-a8c0-473a-a5e2-e5e02ac9221e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=42e6c3d9ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3192 identity=9558 ipv4=10.0.0.135 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nk2rd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 2a634100-f1da-410e-80fa-caaa790a43cb default }" containerID=0029e8492033b5d6a620aa8ec015b287e4feca37d4eebf25eaf4b4aa8206e4b8 datapathConfiguration="&{false false false false false }" interface=lxcbfa00b958841 k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0029e84920 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0029e84920 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=299a2b02-d868-468d-91dc-61f65fb38768,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=299a2b02-d868-468d-91dc-61f65fb38768,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=299a2b02-d868-468d-91dc-61f65fb38768;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=299a2b02-d868-468d-91dc-61f65fb38768;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0029e84920 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 identity=27774 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=299a2b02-d868-468d-91dc-61f65fb38768,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=299a2b02-d868-468d-91dc-61f65fb38768,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0029e84920 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3671 identity=27774 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0029e84920 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3671 identity=27774 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0029e84920 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3671 identity=27774 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0029e84920 endpointID=3671 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-rb9dd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=299a2b02-d868-468d-91dc-61f65fb38768 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=299a2b02-d868-468d-91dc-61f65fb38768 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=0029e84920 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3671 identity=27774 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rb9dd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 6527a58b-261a-46df-910f-d1addc07bdde default }" containerID=c76bb5d2fbaa0612308afba2b95e170613345798349ad3e2e65df3130a220af2 datapathConfiguration="&{false false false false false }" interface=lxcc3ffab32319d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c76bb5d2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c76bb5d2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c76bb5d2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c76bb5d2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=32906 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c76bb5d2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3257 identity=32906 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c76bb5d2fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3257 identity=32906 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c76bb5d2fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3257 identity=32906 ipv4=10.0.0.98 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-pg6p6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 1195b223-8962-4432-a3cf-b80c571a1ae0 default }" containerID=de90feb2d1b800b3a01ee33d0e87ddd2be8e2ed47e2da6b28f861ec030807944 datapathConfiguration="&{false false false false false }" interface=lxccda918514717 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de90feb2d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de90feb2d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de90feb2d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=36407 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de90feb2d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=581 identity=36407 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de90feb2d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=581 identity=36407 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj subsys=endpoint level=info msg="Successful endpoint creation" containerID=de90feb2d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=581 identity=36407 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de90feb2d1 endpointID=581 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-fc7qj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=8a13cc3c-a1b0-4f70-b041-89ecae6df383 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=de90feb2d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=581 identity=36407 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fc7qj subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a3794095-c6b2-4278-80b7-e4539a7eb543] Description:}]" policyAddRequest=fdf7768a-2e84-4ee1-a571-1d47a487c755 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fdf7768a-2e84-4ee1-a571-1d47a487c755 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ae0121bc-59e8-47aa-9f2d-6d01e5e645f1] Description:}]" policyAddRequest=929ff2d1-9278-4da5-8127-8ac70747e6fb subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=929ff2d1-9278-4da5-8127-8ac70747e6fb policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.158 ed3beae2-f487-4f7f-bb61-75635d3eae9c default }" containerID=ff29f6d3039d15e185f95417d510a527c3e1a45234b44c660f8444678f879aa8 datapathConfiguration="&{false false false false false }" interface=lxc3e69f417cf25 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hr7ql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff29f6d303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hr7ql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff29f6d303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hr7ql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff29f6d303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=11278 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hr7ql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff29f6d303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=11278 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hr7ql subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ff29f6d303 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=623 identity=11278 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hr7ql subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff29f6d303 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=623 identity=11278 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hr7ql subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 9bca9df2-dd54-42ff-bed6-770bfbb7e4ac default }" containerID=29ce04e99fb2b7def4c3c356096e331e4270d2135c630d9a31ac0dae94bcd292 datapathConfiguration="&{false false false false false }" interface=lxcc46faef31912 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-6ptzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29ce04e99f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-6ptzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29ce04e99f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-6ptzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29ce04e99f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=36662 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-6ptzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29ce04e99f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=876 identity=36662 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-6ptzc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29ce04e99f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=876 identity=36662 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-6ptzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=29ce04e99f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=876 identity=36662 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-6ptzc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 b039559d-cca7-4d26-a44f-a5df9200d58f default }" containerID=eb5108fcad30901653ddc5a6727a321bc9a9cd7ba96a052ca92afcf970b167cf datapathConfiguration="&{false false false false false }" interface=lxcaaf23e0fa276 k8sPodName=openstack/pxc-operator-7cff949c8b-5hqbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb5108fcad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5hqbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb5108fcad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5hqbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb5108fcad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=24846 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5hqbz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eb5108fcad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=24846 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5hqbz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb5108fcad datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=270 identity=24846 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5hqbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb5108fcad datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=270 identity=24846 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5hqbz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 b17d3209-b333-46de-a24f-aadfa3220218 default }" containerID=59a34609b5db3100a1c1c11eec4fc294ff3c0212426a8dbc1302d97b72bff23f datapathConfiguration="&{false false false false false }" interface=lxc91e7987ea099 k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59a34609b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59a34609b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=59a34609b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59a34609b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59a34609b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=51847 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59a34609b5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=29 identity=51847 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe subsys=endpoint level=info msg="Successful endpoint creation" containerID=59a34609b5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=29 identity=51847 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 530bba0b-e2d3-4567-8db8-7dc78c1c642a default }" containerID=d0020c65eac3b197517a5175958d56ff5d84bf23d05bcbbb0db671aa050298af datapathConfiguration="&{false false false false false }" interface=lxc3db5af7d4127 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0020c65ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0020c65ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0020c65ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=29099 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0020c65ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=29099 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0020c65ea datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=189 identity=29099 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0020c65ea datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=189 identity=29099 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59a34609b5 endpointID=29 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=59a34609b5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=29 identity=51847 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e0147a6-239b-4ac7-abf3-5f7601cd6afe subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 e19f0ee7-c20c-4cbc-937f-d722b55a64cf default }" containerID=6c897748cbe01ff466ce939791ea06a332541617d0931c5d99ba3b9e2af7e11b datapathConfiguration="&{false false false false false }" interface=lxcd7fee1765651 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c897748cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c897748cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c897748cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=60681 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6c897748cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1665 identity=60681 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c897748cb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1665 identity=60681 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c897748cb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1665 identity=60681 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=592037aa-644e-4523-80b3-9145245de7fa] Description:}]" policyAddRequest=7b8f1203-73ad-4372-817d-54c567ace14c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7b8f1203-73ad-4372-817d-54c567ace14c policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.244 52f7c28a-9976-4d9c-ae90-fd8c1d410ba9 default }" containerID=2b32696e687c972d5dced48cb84daa0875843ed2abab8615a26d1121b69e6ee7 datapathConfiguration="&{false false false false false }" interface=lxc072924900b5d k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b32696e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b32696e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b32696e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b32696e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=51847 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b32696e68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3134 identity=51847 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b32696e68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3134 identity=51847 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc subsys=daemon level=info msg="Delete endpoint request" containerID=2b32696e68 endpointID=3134 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2b32696e68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3134 identity=51847 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b80c746-2b96-45c4-ab1a-a439c502b6fc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 d3aea171-95f5-46a9-b66f-a972137117df default }" containerID=f95b996345cdad95b35f4fcc624913d285d64c3221ee5e5bc1d4ad175d3150bf datapathConfiguration="&{false false false false false }" interface=lxc94c5b55e9b6a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f95b996345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f95b996345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f95b996345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=34829 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f95b996345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=34829 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f95b996345 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1277 identity=34829 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f95b996345 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1277 identity=34829 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b0f5ca41-4798-4851-b79d-ceeb7dead8b5] Description:}]" policyAddRequest=5f1348b2-68a5-4fc7-a9b0-e952871b69dc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5f1348b2-68a5-4fc7-a9b0-e952871b69dc policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.95 81f76448-7b0d-4792-bfe4-43abb044fc40 default }" containerID=05ae18173d3bce984bc6ff5810c3ecd169e1e121e99668823de1709e5b2365c8 datapathConfiguration="&{false false false false false }" interface=lxc3ef1bc6f7209 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05ae18173d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05ae18173d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05ae18173d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=32054 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05ae18173d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=32054 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05ae18173d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=75 identity=32054 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05ae18173d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=32054 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009516144304516617 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.94 4a143294-9640-4013-9644-b210be65560c default }" containerID=834ce3e2e8cd4637c1025a8542b9298d699b1dbdd10c9c58504ea521ae4965bb datapathConfiguration="&{false false false false false }" interface=lxc0aef98809e0e k8sPodName=monitoring/node-feature-discovery-worker-5dfbk labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.99 552aa041-1a71-424c-862f-582a72f6a4d2 default }" containerID=5cc74be8cfe2637eada5658bb6d3980a0fc6c9f0911b995e7a71a0be991ad234 datapathConfiguration="&{false false false false false }" interface=lxc4cd8101c71cc k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=834ce3e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5dfbk subsys=endpoint level=info msg="New endpoint" containerID=5cc74be8cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=834ce3e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5dfbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5cc74be8cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 61df4ea5-92ed-451f-8008-87d8aaac4035 default }" containerID=c1179c98909aada33702dd31289aca98ddd3e59094a3ef6a0aba7be6fc0a1f6a datapathConfiguration="&{false false false false false }" interface=lxc5234f4950857 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1179c9890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1179c9890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=834ce3e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=5493 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5dfbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=834ce3e2e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=5493 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5dfbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c1179c9890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5cc74be8cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cc74be8cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=22734 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cc74be8cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=22734 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1179c9890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=64288 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1179c9890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=64288 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=834ce3e2e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=5493 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5dfbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=834ce3e2e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=5493 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5dfbk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1179c9890 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=698 identity=64288 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1179c9890 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=698 identity=64288 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-glvlz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5cc74be8cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2043 identity=22734 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cc74be8cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2043 identity=22734 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-bk7dq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 f81bcd9d-4617-4fd2-bacb-d9d52bfc85b2 default }" containerID=f2acd65bd723a8c3a38ca2a611bdb1eba26f083b471b8bf0a0c08a06fb48bbdc datapathConfiguration="&{false false false false false }" interface=lxc9d9e61622829 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ljt7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2acd65bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 ipv4=10.0.0.38 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ljt7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2acd65bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.38 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ljt7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2acd65bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=677 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.38 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ljt7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2acd65bd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=677 ipv4=10.0.0.38 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ljt7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2acd65bd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2753 identity=677 ipv4=10.0.0.38 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ljt7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2acd65bd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2753 identity=677 ipv4=10.0.0.38 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-ljt7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3440 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03440 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03440 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03440 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03440:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3440 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 395471f5-93d2-4947-bf40-7fb7d8896ec0 default }" containerID=8cf4c7bbd4fd00a4020d350f88a213a74755c7f815bd217fa9fcc0fd01dff1c2 datapathConfiguration="&{false false false false false }" interface=lxc0250e59bb72b k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cf4c7bbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cf4c7bbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8cf4c7bbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8cf4c7bbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 identity=11705 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cf4c7bbd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2877 identity=11705 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cf4c7bbd4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2877 identity=11705 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cf4c7bbd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2877 identity=11705 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cf4c7bbd4 endpointID=2877 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-wxvm8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a653c5a6-7d96-4a2b-bbfb-084c653472a4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8cf4c7bbd4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2877 identity=11705 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wxvm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 081e797c-de8f-4796-901d-6b014047c82e default }" containerID=b054bf2520d75cd32189476cb6fb0241af8d528e5bb7c913244a0e9e7a41a877 datapathConfiguration="&{false false false false false }" interface=lxc883aa84295a3 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b054bf2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b054bf2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.47 3500fe74-0198-4562-9b3a-d42d807e04b2 default }" containerID=17f5e61aabf23ec8e516225ff44566c6943284372655d52944385096897ef246 datapathConfiguration="&{false false false false false }" interface=lxc7f30a35910f3 k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17f5e61aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17f5e61aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=17f5e61aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b054bf2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b054bf2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identity=36490 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b054bf2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identity=36490 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17f5e61aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=18058 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17f5e61aab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=18058 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 238f2b01-a9ad-4a15-997d-aca0126b1a48 default }" containerID=bc61270abab88f5b1d0a49e36285117219568a2b61edae2b547c2ac2b2363356 datapathConfiguration="&{false false false false false }" interface=lxc1bf1fee85d53 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-984dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc61270aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-984dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc61270aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-984dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc61270aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=6368 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-984dq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc61270aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1591 identity=6368 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-984dq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b054bf2520 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=261 identity=36490 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b054bf2520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=261 identity=36490 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sx6bz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=17f5e61aab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=14 identity=18058 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs subsys=endpoint level=info msg="Successful endpoint creation" containerID=17f5e61aab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=14 identity=18058 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-74c9654d9b-5d9qs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bc61270aba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1591 identity=6368 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-984dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc61270aba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1591 identity=6368 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-984dq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 ef5b5007-64c9-4f75-9227-d2273764b3b1 default }" containerID=0c781d0495ed5e373357bfc494941f5100412f2f7e2816eae4bdc49f738c890c datapathConfiguration="&{false false false false false }" interface=lxc602691cd3dee k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c781d0495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c781d0495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c781d0495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=13443 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c781d0495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1356 identity=13443 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c781d0495 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1356 identity=13443 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c781d0495 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1356 identity=13443 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 9ea36114-fbbd-490c-a037-1b382595c86f default }" containerID=cbd0355cb17a58d7933c309fc208fede45c83048dae84162c9dd1d0b77e7755b datapathConfiguration="&{false false false false false }" interface=lxcb1ccd928fc6b k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbd0355cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbd0355cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbd0355cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbd0355cb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=51847 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbd0355cb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1761 identity=51847 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbd0355cb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=51847 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 ead9e1c4-27d0-4271-ae3f-808519b29500 default }" containerID=d7b1e1e5005d82ba2ce5ccd5dfdd28c315c2c0e722c1589c0fa1c694ec27e261 datapathConfiguration="&{false false false false false }" interface=lxcabc2a03131fc k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7b1e1e500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7b1e1e500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d7b1e1e500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7b1e1e500 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=51847 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7b1e1e500 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2826 identity=51847 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7b1e1e500 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2826 identity=51847 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 subsys=daemon level=info msg="Delete endpoint request" containerID=0c781d0495 endpointID=1356 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-9xsc2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c1deaab5-ee3a-4ecc-9911-5ee1085b9a3f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0c781d0495 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1356 identity=13443 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9xsc2 subsys=endpoint level=info msg="Delete endpoint request" containerID=cbd0355cb1 endpointID=1761 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d7b1e1e500 endpointID=2826 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cbd0355cb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=51847 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03357cb0-89bf-4d3f-997a-df76fc09af3a subsys=endpoint level=info msg="Removed endpoint" containerID=d7b1e1e500 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2826 identity=51847 ipv4=10.0.0.57 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5caee525-a21c-4268-acfe-dfa38ebbb422 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 a56396ec-c26d-4c8b-b75a-5e793d31ca32 default }" containerID=6a2d44740358fb2f07606845e86419f383547cb79fb7a9e8880d651c7d44dcda datapathConfiguration="&{false false false false false }" interface=lxc7193edae726a k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a2d447403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a2d447403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a2d447403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=52947 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6a2d447403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=999 identity=52947 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a2d447403 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=999 identity=52947 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a2d447403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=999 identity=52947 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.151 4f766522-f4bd-4f38-b255-edd64c33fd19 default }" containerID=996122480407991ec2f4343858448b6abeb717a31a1e9faa2d0991148b995680 datapathConfiguration="&{false false false false false }" interface=lxce10407ceb7a1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9961224804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9961224804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9961224804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=24359 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9961224804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=24359 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9961224804 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=944 identity=24359 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9961224804 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=944 identity=24359 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 713c3adf-1488-45c9-a780-0446f219e1c5 default }" containerID=36e2ebcf46de9327eb49910ad93e862d0a31e3f5a2169520d53e25667b6b3001 datapathConfiguration="&{false false false false false }" interface=lxc79139f033dff k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36e2ebcf46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36e2ebcf46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36e2ebcf46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36e2ebcf46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=29260 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36e2ebcf46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=29260 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 f08424c6-c1dc-49f9-b75e-ef74c7ea8bdc default }" containerID=3e8694df4428e578b324eb663d42d3f9c4b36d06e01570ef9077d795cae8aa9d datapathConfiguration="&{false false false false false }" interface=lxc800f7a08825c k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e8694df44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 7cfd674b-c93e-4043-b57c-203dbc806716 default }" containerID=471d5fdde598ea51a75ff01f80f07957081e896065ef16a2b4c3bfb0ed581134 datapathConfiguration="&{false false false false false }" interface=lxc6a5fab8cbc4c k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=471d5fdde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e8694df44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=471d5fdde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e8694df44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=57693 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=471d5fdde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e8694df44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=57693 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=471d5fdde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=51847 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36e2ebcf46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1707 identity=29260 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=36e2ebcf46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1707 identity=29260 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-c7pjj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=471d5fdde5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3255 identity=51847 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=471d5fdde5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=51847 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3e8694df44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1893 identity=57693 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e8694df44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1893 identity=57693 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.178 c3d0ebec-ed94-41cc-ada7-58665460364f default }" containerID=374eaad03d4ac8b73a26a115e50ff7072f926eee1f008d0aa61b715b3d193dd6 datapathConfiguration="&{false false false false false }" interface=lxc1a692587692e k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=374eaad03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=374eaad03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=374eaad03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 identity=13305 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=374eaad03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1800 identity=13305 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=374eaad03d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1800 identity=13305 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=374eaad03d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1800 identity=13305 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 e09d1929-b435-4b33-bf1e-fa29c8937872 default }" containerID=102ef040aa35798202388e4e55f9a416663e4c7fda4774f27bafe064169557f6 datapathConfiguration="&{false false false false false }" interface=lxc3c7ad9739013 k8sPodName=monitoring/vector-kxp7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=102ef040aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/vector-kxp7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=102ef040aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/vector-kxp7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=102ef040aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=58277 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/vector-kxp7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=102ef040aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=58277 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/vector-kxp7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=102ef040aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2235 identity=58277 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/vector-kxp7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=102ef040aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2235 identity=58277 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/vector-kxp7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=471d5fdde5 endpointID=3255 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=471d5fdde5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=51847 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3194c869-a0f9-44d5-bf0e-01783a9458a9 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 f7d6dd58-de31-4480-9e7d-89b1ca3c59f6 default }" containerID=8f0519f5739a37569d5d12083c64a20a60070d33cf94c52e4df79dd81566488e datapathConfiguration="&{false false false false false }" interface=lxca37e17604851 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f0519f573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f0519f573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f0519f573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=65390 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f0519f573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=65390 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8f0519f573 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=455 identity=65390 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f0519f573 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=455 identity=65390 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 ee37a279-7e14-49a3-a63a-c1457a9de1cc default }" containerID=8fd2535f926ea2096a02c09b3797f8627f5284bd0e9b181aaa6bda56e454befd datapathConfiguration="&{false false false false false }" interface=lxccebc5bbc47b8 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jm56k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fd2535f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jm56k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fd2535f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jm56k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fd2535f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identity=7499 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jm56k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fd2535f92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identity=7499 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jm56k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fd2535f92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3762 identity=7499 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jm56k subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fd2535f92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3762 identity=7499 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jm56k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 4178aa01-03d9-4c98-823e-e66abcf82b03 default }" containerID=25e9b45168442f85924ef3f2470cdd10e97a18bab2eba978105aa4951955b532 datapathConfiguration="&{false false false false false }" interface=lxc7efba9ba5ec7 k8sPodName=openstack/memcached-memcached-6479589586-f59k6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25e9b45168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f59k6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25e9b45168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f59k6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25e9b45168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=4506 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f59k6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25e9b45168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=4506 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f59k6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25e9b45168 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=875 identity=4506 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f59k6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25e9b45168 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=4506 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-f59k6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 7dc67029-5aff-43f9-814e-0a33efe7c32c default }" containerID=e036c20ddda18d76aed349d5174d317f5585b1803013877cef9852e98fa168ca datapathConfiguration="&{false false false false false }" interface=lxc40c1187175fc k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e036c20ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e036c20ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e036c20ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e036c20ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3991 identity=51847 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e036c20ddd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3991 identity=51847 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e036c20ddd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3991 identity=51847 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 subsys=daemon level=info msg="Delete endpoint request" containerID=e036c20ddd endpointID=3991 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e036c20ddd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3991 identity=51847 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-855719f6-4afb-4730-a085-0754d8dbf377 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 d50f2984-315a-48b1-8387-70ac85be8e83 default }" containerID=ec710b87c3c6b52add1c782721251d4c7877b582de2d8cba243608086bf419ce datapathConfiguration="&{false false false false false }" interface=lxc8713accbebe4 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec710b87c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec710b87c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ec710b87c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ec710b87c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=38226 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec710b87c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=38226 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec710b87c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2061 identity=38226 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec710b87c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2061 identity=38226 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 a2ea4e54-0e86-40d4-8c41-55fb76cc7820 default }" containerID=5d702eddbc78cba095876abbb23636b57c78ba2886f1d908ca07bb5d625243c7 datapathConfiguration="&{false false false false false }" interface=lxc59b618e8fa22 k8sPodName=openstack/keystone-api-55577fd6bd-9vb88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d702eddbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-55577fd6bd-9vb88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d702eddbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-55577fd6bd-9vb88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d702eddbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=3708 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-55577fd6bd-9vb88 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d702eddbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=3708 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-55577fd6bd-9vb88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 81a9bb0c-36f4-44aa-aa9a-3f22503441f9 default }" containerID=e1b758882c7d67289c9470c11d72cf4c39bc27170084f9af36166c2d3cfc972e datapathConfiguration="&{false false false false false }" interface=lxc63e8c3aca420 k8sPodName=openstack/keystone-credential-setup-sdptd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1b758882c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-sdptd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1b758882c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-sdptd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1b758882c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 identity=22253 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-sdptd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1b758882c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2797 identity=22253 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-sdptd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d702eddbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=538 identity=3708 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-55577fd6bd-9vb88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d702eddbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=538 identity=3708 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-55577fd6bd-9vb88 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1b758882c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2797 identity=22253 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-sdptd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1b758882c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2797 identity=22253 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-sdptd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1b758882c endpointID=2797 k8sNamespace=openstack k8sPodName=keystone-credential-setup-sdptd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=5110555c-72fe-4d26-9dcb-f071c5f73794 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e1b758882c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2797 identity=22253 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-credential-setup-sdptd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 06bf20a9-b7e8-4ac1-a6ce-aab9bed3453e default }" containerID=d315d9a627a649936fbb31a1595e417959eb9b313e919ab1cf85c88daa4a792c datapathConfiguration="&{false false false false false }" interface=lxcfb28841c242b k8sPodName=openstack/keystone-db-init-bgzqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d315d9a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-db-init-bgzqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d315d9a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-db-init-bgzqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d315d9a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=63207 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-db-init-bgzqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d315d9a627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=63207 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-db-init-bgzqw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d315d9a627 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=127 identity=63207 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-db-init-bgzqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d315d9a627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=63207 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-db-init-bgzqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d315d9a627 endpointID=127 k8sNamespace=openstack k8sPodName=keystone-db-init-bgzqw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=f3ffbe6d-6e19-4132-89d3-a113f6dd431d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d315d9a627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=63207 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-db-init-bgzqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 b2891d01-651c-450b-9128-e85ec2a428eb default }" containerID=3e566f023abfcc6f60279e288e0127833e7c65b92b12d26233243db2103d9377 datapathConfiguration="&{false false false false false }" interface=lxcf458d277d45b k8sPodName=openstack/keystone-fernet-setup-699nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e566f023a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e566f023a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e566f023a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e566f023a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 identity=14452 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e566f023a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 identity=14452 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e566f023a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3729 identity=14452 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e566f023a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3729 identity=14452 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e566f023a endpointID=3729 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-699nw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8f91b018-ba67-4e2e-a2d9-9c65c03b6e9e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3e566f023a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3729 identity=14452 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-fernet-setup-699nw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 f6552154-a943-46e0-b2a8-12475f812f34 default }" containerID=c513782c4b8f4f958f7d9809800a8abbfc48a447bfe7ce1cd8cc0dfa346247b4 datapathConfiguration="&{false false false false false }" interface=lxce0a17051461d k8sPodName=openstack/keystone-db-sync-9p2dw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c513782c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-9p2dw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c513782c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-9p2dw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c513782c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=17855 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-9p2dw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c513782c4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1649 identity=17855 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-9p2dw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c513782c4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1649 identity=17855 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-9p2dw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c513782c4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1649 identity=17855 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-9p2dw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c513782c4b endpointID=1649 k8sNamespace=openstack k8sPodName=keystone-db-sync-9p2dw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=550433b8-41dc-49c3-b6f9-a3cadc889ed7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c513782c4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1649 identity=17855 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-sync-9p2dw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 3e1e60bb-c326-497a-a8ce-10d18fd1255f default }" containerID=86c1ef008f7191f39e003a355456832ddde28c2e31734d1000f73317c69db387 datapathConfiguration="&{false false false false false }" interface=lxcd2d66d890dc3 k8sPodName=openstack/keystone-rabbit-init-pw7g9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86c1ef008f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86c1ef008f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=86c1ef008f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=86c1ef008f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=53259 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86c1ef008f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=53259 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86c1ef008f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=425 identity=53259 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86c1ef008f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=53259 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86c1ef008f endpointID=425 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-pw7g9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0037fea2-373c-49e7-987e-2a7a92a4888a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=86c1ef008f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=53259 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-pw7g9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 5de040f1-e31e-40af-8f39-797e6b08ad21 default }" containerID=8902f0f26406b6b828fddcf15b48ef6d93306db4f8b8e86e06367b5feff64a26 datapathConfiguration="&{false false false false false }" interface=lxcdd0523da065a k8sPodName=openstack/keystone-domain-manage-9s9fg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8902f0f264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-9s9fg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8902f0f264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=326b040d-bdca-499b-b072-02c993b29fce,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=326b040d-bdca-499b-b072-02c993b29fce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-9s9fg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=326b040d-bdca-499b-b072-02c993b29fce;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=326b040d-bdca-499b-b072-02c993b29fce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8902f0f264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=9337 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=326b040d-bdca-499b-b072-02c993b29fce,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=326b040d-bdca-499b-b072-02c993b29fce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-9s9fg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8902f0f264 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=9337 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-9s9fg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8902f0f264 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3749 identity=9337 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-9s9fg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8902f0f264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3749 identity=9337 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-9s9fg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8902f0f264 endpointID=3749 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9s9fg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=326b040d-bdca-499b-b072-02c993b29fce k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=326b040d-bdca-499b-b072-02c993b29fce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8902f0f264 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3749 identity=9337 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-9s9fg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 6cbb2fc2-d137-4528-b167-e5be1c33d6ec default }" containerID=d61ecaa55ce791963c7426d44059d4efd635ab8b16baeaa0e84192238992c462 datapathConfiguration="&{false false false false false }" interface=lxce77d787bf51c k8sPodName=openstack/keystone-bootstrap-kj6xm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d61ecaa55c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-bootstrap-kj6xm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d61ecaa55c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-bootstrap-kj6xm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d61ecaa55c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identity=4217 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-bootstrap-kj6xm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d61ecaa55c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2752 identity=4217 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-bootstrap-kj6xm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d61ecaa55c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2752 identity=4217 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-bootstrap-kj6xm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d61ecaa55c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2752 identity=4217 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-bootstrap-kj6xm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d61ecaa55c endpointID=2752 k8sNamespace=openstack k8sPodName=keystone-bootstrap-kj6xm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=81820369-ced2-40f7-ab6b-b7faf7c312b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d61ecaa55c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2752 identity=4217 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-bootstrap-kj6xm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 58793c44-2aeb-41f8-940d-50c74adc1061 default }" containerID=560d593b6e99d295894cafbad4d9c4d01a9902bbd8936064b5cef5d9ddf23a06 datapathConfiguration="&{false false false false false }" interface=lxc453c03df77ec k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=560d593b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=560d593b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=560d593b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=560d593b6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=51847 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=560d593b6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1883 identity=51847 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=560d593b6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1883 identity=51847 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 subsys=daemon level=info msg="Delete endpoint request" containerID=560d593b6e endpointID=1883 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=560d593b6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1883 identity=51847 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4917538-00e9-412b-903d-b91a01ca8e99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 5c799a97-3ca6-4e19-afa8-9cf62f2176b6 default }" containerID=1920726f3b6392cbea32da668a9e9846a9ef2d03b26651e1baa7bf21d6df722a datapathConfiguration="&{false false false false false }" interface=lxc004e887f5d02 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1920726f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1920726f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1920726f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1920726f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identity=22237 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1920726f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identity=22237 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1920726f3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2897 identity=22237 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1920726f3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2897 identity=22237 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 050e87b4-8c03-482a-ad31-9de35225e00c default }" containerID=c2c658dad690a928bf6f89827faa9aca292ce04fdc4333ee8ca527b3463d9d16 datapathConfiguration="&{false false false false false }" interface=lxcdc6859b8ebd2 k8sPodName=openstack/barbican-db-init-2c2xj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2c658dad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-2c2xj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2c658dad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-2c2xj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2c658dad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identity=20631 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-2c2xj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c2c658dad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identity=20631 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-2c2xj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2c658dad6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2763 identity=20631 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-2c2xj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2c658dad6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2763 identity=20631 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-2c2xj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 bd363b50-3a16-443f-8169-68189f097435 default }" containerID=2c8b30118256f83ab09528a60d8d80c1c4d1d12856f75edbf8db24bb12e687ae datapathConfiguration="&{false false false false false }" interface=lxc8e2ec3c26986 k8sPodName=openstack/barbican-api-84966475d-fpmp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c8b301182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-api-84966475d-fpmp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c8b301182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-api-84966475d-fpmp5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c8b301182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identity=1053 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-api-84966475d-fpmp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c8b301182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2007 identity=1053 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-api-84966475d-fpmp5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c8b301182 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2007 identity=1053 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-api-84966475d-fpmp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c8b301182 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2007 identity=1053 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-api-84966475d-fpmp5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2c658dad6 endpointID=2763 k8sNamespace=openstack k8sPodName=barbican-db-init-2c2xj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=bb030169-2689-4386-8278-4cf0a1cf99b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c2c658dad6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2763 identity=20631 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-init-2c2xj subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03582588228928538 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.163 fc0f66c7-9dcb-4e85-9b58-9712a28acf42 default }" containerID=27839a96592ea8fbba7025af49bab9659ed72245240099a56909e0b603090f1a datapathConfiguration="&{false false false false false }" interface=lxc7d70aa232859 k8sPodName=openstack/barbican-db-sync-z9pzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27839a9659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-db-sync-z9pzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27839a9659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-db-sync-z9pzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27839a9659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=20213 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-db-sync-z9pzk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=27839a9659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=20213 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-db-sync-z9pzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27839a9659 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=858 identity=20213 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-db-sync-z9pzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=27839a9659 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=858 identity=20213 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-db-sync-z9pzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=27839a9659 endpointID=858 k8sNamespace=openstack k8sPodName=barbican-db-sync-z9pzk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b9cf575f-752e-49f5-a678-0ca64f98c96e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=27839a9659 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=858 identity=20213 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-db-sync-z9pzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 a30713b3-c174-4803-88dd-dbddd452dd7c default }" containerID=9a324174026cee6bbe41d3459b401fa88008807a5bf1293d3beb15178c1f1bbc datapathConfiguration="&{false false false false false }" interface=lxca74528b3e015 k8sPodName=openstack/barbican-rabbit-init-kzmcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a32417402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-kzmcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a32417402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-kzmcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a32417402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identity=31050 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-kzmcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a32417402 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identity=31050 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-kzmcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a32417402 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2915 identity=31050 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-kzmcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a32417402 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2915 identity=31050 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-kzmcx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a32417402 endpointID=2915 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-kzmcx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0e627126-fb26-4eec-88ca-9ebe90cd3baf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9a32417402 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2915 identity=31050 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-kzmcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 69c04590-f924-4e91-85bd-ed8919f24081 default }" containerID=c430926e107229b00fe2401aae8c88c520c0d7b4a940f1ab2d4779b5401afeb6 datapathConfiguration="&{false false false false false }" interface=lxc3c8f9c192ecf k8sPodName=openstack/barbican-ks-service-xqgpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c430926e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c430926e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c430926e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c430926e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=63446 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c430926e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=63446 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c430926e10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1850 identity=63446 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c430926e10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1850 identity=63446 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c430926e10 endpointID=1850 k8sNamespace=openstack k8sPodName=barbican-ks-service-xqgpj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=2239c215-e00d-4440-bb5d-b7bc7680b004 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c430926e10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1850 identity=63446 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/barbican-ks-service-xqgpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 1d07d116-aa07-4adb-9694-242c9a00fd95 default }" containerID=b937b419271b6a9571722be6fb3bf69b27292b4edf94499d99e94dde9d532eac datapathConfiguration="&{false false false false false }" interface=lxc146bb5a32dee k8sPodName=openstack/barbican-ks-endpoints-s97lr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b937b41927 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s97lr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b937b41927 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s97lr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b937b41927 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=14222 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s97lr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b937b41927 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=14222 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s97lr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b937b41927 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=262 identity=14222 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s97lr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b937b41927 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=14222 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s97lr subsys=daemon level=info msg="Delete endpoint request" containerID=b937b41927 endpointID=262 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-s97lr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cf10bf95-178d-48c5-914a-d00e8d7b625c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b937b41927 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=262 identity=14222 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-s97lr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 41b2d42b-ad8b-41b1-aeb4-1ab056e62c40 default }" containerID=f057959bf4daab1c8c13d5da99aaa9298678c16f77ccfb33b2de2dc1a560d31c datapathConfiguration="&{false false false false false }" interface=lxcb618fac34914 k8sPodName=openstack/barbican-ks-user-8jl9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f057959bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-ks-user-8jl9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f057959bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-ks-user-8jl9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f057959bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=10946 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-ks-user-8jl9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f057959bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=10946 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-ks-user-8jl9j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f057959bf4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1599 identity=10946 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-ks-user-8jl9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=f057959bf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1599 identity=10946 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-ks-user-8jl9j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f057959bf4 endpointID=1599 k8sNamespace=openstack k8sPodName=barbican-ks-user-8jl9j subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=270e3a04-b9f7-42d0-b530-537c9afae4d3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f057959bf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1599 identity=10946 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/barbican-ks-user-8jl9j subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.160 4507350d-01cf-4824-9d13-f9ceb446d753 default }" containerID=89cc10452770c61aebee3768be4c266c49bab069c9e85dd5e7d945d28a6371ed datapathConfiguration="&{false false false false false }" interface=lxcc0a395369893 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-x456d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89cc104527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-x456d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89cc104527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-x456d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89cc104527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=25887 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-x456d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89cc104527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=25887 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-x456d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89cc104527 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=25887 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-x456d subsys=endpoint level=info msg="Successful endpoint creation" containerID=89cc104527 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=25887 ipv4=10.0.0.160 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-x456d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 c42c028c-9a33-4c7f-8de8-87960c072fb0 default }" containerID=c1d1c555cd16d56d413496a87bf27710dcaf4a75dc17ab2e0b4af739fc63154e datapathConfiguration="&{false false false false false }" interface=lxce72480e563c0 k8sPodName=openstack/rook-ceph-detect-version-nsz79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1d1c555cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nsz79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1d1c555cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nsz79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1d1c555cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=54104 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nsz79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1d1c555cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=54104 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nsz79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1d1c555cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=523 identity=54104 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nsz79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1d1c555cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=54104 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nsz79 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1d1c555cd endpointID=523 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-nsz79 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e79372c2-aa71-4041-b632-a1c9ef952098 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c1d1c555cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=54104 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nsz79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 eb14c97e-d39e-4127-bdfe-84fe87566c9a default }" containerID=6ba04f8921876b7585d2106a04a5071fffd04f0ab0469054b92df028f9371fc5 datapathConfiguration="&{false false false false false }" interface=lxc9eb47093af63 k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ba04f8921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ba04f8921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ba04f8921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=2062 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ba04f8921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=2062 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ba04f8921 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1671 identity=2062 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ba04f8921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=2062 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ba04f8921 endpointID=1671 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-ddhvr subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0c62d000-6e59-44f0-abc5-0d3f401d1b1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6ba04f8921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=2062 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ddhvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 681c11ea-2176-45a3-b4a1-52d2350b2c59 default }" containerID=a5698eebf1054d05988ad09a2b3e79331cb287049151c532043816204b80606a datapathConfiguration="&{false false false false false }" interface=lxccaaaa0e64aa5 k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5698eebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5698eebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5698eebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 identity=51847 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5698eebf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2466 identity=51847 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5698eebf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2466 identity=51847 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5698eebf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2466 identity=51847 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 subsys=daemon level=info msg="Delete endpoint request" containerID=a5698eebf1 endpointID=2466 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a5698eebf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2466 identity=51847 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1949d104-4492-4bf7-9a6b-3e334c149613 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 b7b18f7a-96fa-4a26-afb3-1f633b26a0cf default }" containerID=99381aac493bc6c8dbce2e15a9fd37c695a3f79b0de3b4d44d4b664c7cbae9ea datapathConfiguration="&{false false false false false }" interface=lxcde0f422214b8 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99381aac49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99381aac49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99381aac49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=61727 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=99381aac49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=61727 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99381aac49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=308 identity=61727 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99381aac49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=308 identity=61727 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.161 9f3a8cfc-256c-4920-8a16-993b24f24d99 default }" containerID=04964fdad972889607906fb37b50e185842f325b88344f2688ab27d225fbf6b0 datapathConfiguration="&{false false false false false }" interface=lxc7d599109da8a k8sPodName=openstack/glance-db-init-5z7s8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04964fdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04964fdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=04964fdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04964fdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=3682 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04964fdad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=3682 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04964fdad9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=469 identity=3682 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04964fdad9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=3682 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04964fdad9 endpointID=469 k8sNamespace=openstack k8sPodName=glance-db-init-5z7s8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=8204831f-b411-4d5d-a789-48ca12bfdcc9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=04964fdad9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=3682 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-db-init-5z7s8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 cc2f2f9c-c6c1-494d-b34a-7269455bc157 default }" containerID=3296996085b81e28b64b2d509acb8ea9d3376900a2b95dd71731d3bc9a860587 datapathConfiguration="&{false false false false false }" interface=lxc001d532f7246 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5jx6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3296996085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5jx6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3296996085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5jx6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3296996085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identity=44273 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5jx6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3296996085 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identity=44273 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5jx6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 38f4d8da-2e4b-4ffd-a7c2-4845b39809c1 default }" containerID=48baf91fd758cccb4160b922cf284c0ca98f735a9753bbaaf84c1e39387562e3 datapathConfiguration="&{false false false false false }" interface=lxcd7472f57f122 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-swf5k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48baf91fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-swf5k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48baf91fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-swf5k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48baf91fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=12164 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-swf5k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48baf91fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=12164 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-swf5k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3296996085 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1387 identity=44273 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5jx6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=3296996085 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1387 identity=44273 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5jx6q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=48baf91fd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2142 identity=12164 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-swf5k subsys=endpoint level=info msg="Successful endpoint creation" containerID=48baf91fd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2142 identity=12164 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-swf5k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 2496dd41-3fb5-4dc8-97b9-54e65f5bad38 default }" containerID=0cd7a4a51cb6db761558f9f1d167a67608b8d7c1e06d00dd711a3c69d1f81418 datapathConfiguration="&{false false false false false }" interface=lxc8b05c371c56b k8sPodName=openstack/glance-db-sync-976r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cd7a4a51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-sync-976r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cd7a4a51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-sync-976r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cd7a4a51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=39018 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-sync-976r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cd7a4a51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1603 identity=39018 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-sync-976r9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0cd7a4a51c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1603 identity=39018 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-sync-976r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cd7a4a51c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1603 identity=39018 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-sync-976r9 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0cd7a4a51c endpointID=1603 k8sNamespace=openstack k8sPodName=glance-db-sync-976r9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=81c8e921-990e-4e31-bf3f-1437dbedb508 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0cd7a4a51c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1603 identity=39018 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-db-sync-976r9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 8ad1d44b-11f6-44f2-bff4-493f26d915f5 default }" containerID=1733560d1b3e7a19ead7b9bbef7de38dd9e351f6d378441e7ec241b2c4502477 datapathConfiguration="&{false false false false false }" interface=lxcdfdb3b5f4178 k8sPodName=openstack/glance-rabbit-init-bhpv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1733560d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-rabbit-init-bhpv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1733560d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-rabbit-init-bhpv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1733560d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=7677 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-rabbit-init-bhpv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1733560d1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=7677 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-rabbit-init-bhpv6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1733560d1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=444 identity=7677 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-rabbit-init-bhpv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1733560d1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=7677 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-rabbit-init-bhpv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1733560d1b endpointID=444 k8sNamespace=openstack k8sPodName=glance-rabbit-init-bhpv6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=50ddf647-0cd1-43b9-ac62-98f615eb2f98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1733560d1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=7677 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-rabbit-init-bhpv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 e8f27f90-fba2-45b1-9a0c-553ce2ac1044 default }" containerID=21cd99cf519e3b8ea46656151d146cbfbe99998b63302642b6c22f4562ad4cff datapathConfiguration="&{false false false false false }" interface=lxcf01e20f5ad76 k8sPodName=openstack/glance-ks-service-kkbbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21cd99cf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-service-kkbbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21cd99cf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-service-kkbbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21cd99cf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=11794 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-service-kkbbz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21cd99cf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=11794 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-service-kkbbz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=21cd99cf51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1226 identity=11794 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-service-kkbbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=21cd99cf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1226 identity=11794 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-service-kkbbz subsys=daemon level=info msg="Delete endpoint request" containerID=21cd99cf51 endpointID=1226 k8sNamespace=openstack k8sPodName=glance-ks-service-kkbbz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=1bf04fb0-9265-45ff-8841-e9010c3b48cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=21cd99cf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1226 identity=11794 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-ks-service-kkbbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 bfc191da-f0ae-43c9-a623-4d9f47a5e6f6 default }" containerID=ca84622fc1d6bfa32fa1bfc294ea72ea5d4ca3bdeeb9f8022b8460ddfb2f1f81 datapathConfiguration="&{false false false false false }" interface=lxc9d90e6cb8a4c k8sPodName=openstack/glance-ks-endpoints-xxdnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca84622fc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-xxdnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca84622fc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=03b410a3-66ab-4177-a568-4b0b598710be,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=03b410a3-66ab-4177-a568-4b0b598710be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-xxdnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=03b410a3-66ab-4177-a568-4b0b598710be;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=03b410a3-66ab-4177-a568-4b0b598710be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca84622fc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=861 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=03b410a3-66ab-4177-a568-4b0b598710be,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=03b410a3-66ab-4177-a568-4b0b598710be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-xxdnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca84622fc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=861 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-xxdnw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ca84622fc1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=381 identity=861 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-xxdnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca84622fc1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=861 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-xxdnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca84622fc1 endpointID=381 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xxdnw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=03b410a3-66ab-4177-a568-4b0b598710be k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=03b410a3-66ab-4177-a568-4b0b598710be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca84622fc1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=861 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-xxdnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 00691631-eb2a-4341-9085-7c4a138fd782 default }" containerID=a58aeb9ce84df40938bef32030e507223748c104ec999c204a2787890f4f67ef datapathConfiguration="&{false false false false false }" interface=lxcebc3290ace1b k8sPodName=openstack/glance-ks-user-t8nk8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a58aeb9ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-user-t8nk8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a58aeb9ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-user-t8nk8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a58aeb9ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=1618 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-user-t8nk8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a58aeb9ce8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=1618 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-user-t8nk8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a58aeb9ce8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=1618 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-user-t8nk8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a58aeb9ce8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=1618 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-user-t8nk8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a58aeb9ce8 endpointID=905 k8sNamespace=openstack k8sPodName=glance-ks-user-t8nk8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=726fa611-4f85-4e9c-bf58-76f285eee404 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a58aeb9ce8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=1618 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-ks-user-t8nk8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 d6b35b19-9703-4348-a602-2a3f736f457b default }" containerID=4317709790ab30b746ef856a78f2264faa1ec8a71b05ab4491428022013d79ea datapathConfiguration="&{false false false false false }" interface=lxc3adee0ac1435 k8sPodName=openstack/glance-metadefs-load-zkl5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4317709790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4317709790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4317709790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4317709790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=18449 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4317709790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=18449 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4317709790 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2326 identity=18449 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=4317709790 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2326 identity=18449 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4317709790 endpointID=2326 k8sNamespace=openstack k8sPodName=glance-metadefs-load-zkl5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=e9c1980a-e7ff-4b6a-974f-4b9dd4f59f87 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4317709790 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2326 identity=18449 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-metadefs-load-zkl5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 1c75e040-a848-4d58-89f1-aa8aa321b6b4 default }" containerID=a6a3fec2a1308a435ce706e5cdde9312d0cd7a57c88ac12ba2ba67bab49bbff4 datapathConfiguration="&{false false false false false }" interface=lxcd8554b72ffb8 k8sPodName=openstack/glance-storage-init-zjsfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6a3fec2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-storage-init-zjsfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6a3fec2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=273a224a-76c7-4190-814c-4282c830cade,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=273a224a-76c7-4190-814c-4282c830cade,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-storage-init-zjsfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=273a224a-76c7-4190-814c-4282c830cade;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=273a224a-76c7-4190-814c-4282c830cade;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6a3fec2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identity=943 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=273a224a-76c7-4190-814c-4282c830cade,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=273a224a-76c7-4190-814c-4282c830cade,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-storage-init-zjsfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6a3fec2a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=259 identity=943 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-storage-init-zjsfv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a6a3fec2a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=259 identity=943 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-storage-init-zjsfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6a3fec2a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=259 identity=943 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-storage-init-zjsfv subsys=daemon level=info msg="Delete endpoint request" containerID=a6a3fec2a1 endpointID=259 k8sNamespace=openstack k8sPodName=glance-storage-init-zjsfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=273a224a-76c7-4190-814c-4282c830cade k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=273a224a-76c7-4190-814c-4282c830cade k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a6a3fec2a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=259 identity=943 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-storage-init-zjsfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 02ead564-9623-44d2-bbde-5db0f60cfae5 default }" containerID=e8bc45d73d0cdc6ea3f5159735ca38c739e9388fbc8bf7f22fbab0d0aa8c8772 datapathConfiguration="&{false false false false false }" interface=lxcf550a3552b40 k8sPodName=openstack/glance-api-d75476f68-5sxxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8bc45d73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d75476f68-5sxxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8bc45d73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d75476f68-5sxxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8bc45d73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=491 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d75476f68-5sxxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8bc45d73d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=491 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d75476f68-5sxxl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e8bc45d73d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1028 identity=491 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d75476f68-5sxxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8bc45d73d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1028 identity=491 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-d75476f68-5sxxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 c1329c32-5c6d-45fe-a68d-a6e00dc3e684 default }" containerID=8bd0936890158df46f809b2922232dd52fbc4a2cda8da12e49756021464eb01e datapathConfiguration="&{false false false false false }" interface=lxc9de312597423 k8sPodName=openstack/staffeln-conductor-f5dbf477-s56ct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bd0936890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-f5dbf477-s56ct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bd0936890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-f5dbf477-s56ct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bd0936890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=6553 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-f5dbf477-s56ct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bd0936890 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=6553 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-f5dbf477-s56ct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 69a2e6c3-161a-4880-a4b3-fab8ec4a8f18 default }" containerID=e302c601ef12196ebb85a2146921bd2323be31ece79b476c0e422580c8efc0e9 datapathConfiguration="&{false false false false false }" interface=lxcda9fa1948f42 k8sPodName=openstack/staffeln-api-554564c7f8-mch2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e302c601ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-api-554564c7f8-mch2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e302c601ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-api-554564c7f8-mch2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e302c601ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=25051 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-api-554564c7f8-mch2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e302c601ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1321 identity=25051 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-api-554564c7f8-mch2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 fdc9b39d-a2f3-4ae8-a56b-b00da3109b94 default }" containerID=02d0b0ac9268789e4bcd009a07b57332fa0d129fdfd0f996e252643ff88119d9 datapathConfiguration="&{false false false false false }" interface=lxcc9774ca1a07f k8sPodName=openstack/staffeln-db-init-bf5sr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02d0b0ac92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-db-init-bf5sr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02d0b0ac92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-db-init-bf5sr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02d0b0ac92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identity=12428 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-db-init-bf5sr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02d0b0ac92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=920 identity=12428 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-db-init-bf5sr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bd0936890 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1041 identity=6553 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-f5dbf477-s56ct subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bd0936890 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1041 identity=6553 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-f5dbf477-s56ct subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e302c601ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1321 identity=25051 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-api-554564c7f8-mch2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=e302c601ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1321 identity=25051 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-api-554564c7f8-mch2l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02d0b0ac92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=920 identity=12428 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-db-init-bf5sr subsys=endpoint level=info msg="Successful endpoint creation" containerID=02d0b0ac92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=920 identity=12428 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-db-init-bf5sr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02d0b0ac92 endpointID=920 k8sNamespace=openstack k8sPodName=staffeln-db-init-bf5sr subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=a2885515-ae38-40aa-aa0a-cfb15074fd13 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=02d0b0ac92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=920 identity=12428 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-db-init-bf5sr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 5f9e048b-430c-4890-9b1d-cd5c70351472 default }" containerID=94a08f80a5f5919653f5386ed70b24ebd2c0b8e8ea3066ef0981f131b9cc8dda datapathConfiguration="&{false false false false false }" interface=lxcba3367472dfb k8sPodName=openstack/staffeln-db-sync-t4g8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94a08f80a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-db-sync-t4g8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94a08f80a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=47cf9349-7b7a-4716-ae47-2155fec8ed35,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=47cf9349-7b7a-4716-ae47-2155fec8ed35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-db-sync-t4g8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=47cf9349-7b7a-4716-ae47-2155fec8ed35;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=47cf9349-7b7a-4716-ae47-2155fec8ed35;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94a08f80a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=2703 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=47cf9349-7b7a-4716-ae47-2155fec8ed35,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=47cf9349-7b7a-4716-ae47-2155fec8ed35,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-db-sync-t4g8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94a08f80a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=2703 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-db-sync-t4g8d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94a08f80a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1010 identity=2703 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-db-sync-t4g8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=94a08f80a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1010 identity=2703 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/staffeln-db-sync-t4g8d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager