level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config
level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config
level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config
level=info msg="  --agent-health-port='9879'" subsys=daemon
level=info msg="  --agent-labels=''" subsys=daemon
level=info msg="  --agent-liveness-update-interval='1s'" subsys=daemon
level=info msg="  --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon
level=info msg="  --allocator-list-timeout='3m0s'" subsys=daemon
level=info msg="  --allow-icmp-frag-needed='true'" subsys=daemon
level=info msg="  --allow-localhost='auto'" subsys=daemon
level=info msg="  --annotate-k8s-node='false'" subsys=daemon
level=info msg="  --api-rate-limit=''" subsys=daemon
level=info msg="  --arping-refresh-period='30s'" subsys=daemon
level=info msg="  --auto-create-cilium-node-resource='true'" subsys=daemon
level=info msg="  --auto-direct-node-routes='false'" subsys=daemon
level=info msg="  --bgp-announce-lb-ip='false'" subsys=daemon
level=info msg="  --bgp-announce-pod-cidr='false'" subsys=daemon
level=info msg="  --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon
level=info msg="  --bpf-auth-map-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-global-any-max='262144'" subsys=daemon
level=info msg="  --bpf-ct-global-tcp-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon
level=info msg="  --bpf-filter-priority='1'" subsys=daemon
level=info msg="  --bpf-fragments-map-max='8192'" subsys=daemon
level=info msg="  --bpf-lb-acceleration='disabled'" subsys=daemon
level=info msg="  --bpf-lb-affinity-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-algorithm='random'" subsys=daemon
level=info msg="  --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon
level=info msg="  --bpf-lb-dsr-dispatch='opt'" subsys=daemon
level=info msg="  --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon
level=info msg="  --bpf-lb-external-clusterip='false'" subsys=daemon
level=info msg="  --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon
level=info msg="  --bpf-lb-maglev-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-maglev-table-size='16381'" subsys=daemon
level=info msg="  --bpf-lb-map-max='65536'" subsys=daemon
level=info msg="  --bpf-lb-mode='snat'" subsys=daemon
level=info msg="  --bpf-lb-rev-nat-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-service-backend-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-service-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-sock='false'" subsys=daemon
level=info msg="  --bpf-lb-sock-hostns-only='false'" subsys=daemon
level=info msg="  --bpf-lb-source-range-map-max='0'" subsys=daemon
level=info msg="  --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon
level=info msg="  --bpf-map-event-buffers=''" subsys=daemon
level=info msg="  --bpf-nat-global-max='524288'" subsys=daemon
level=info msg="  --bpf-neigh-global-max='524288'" subsys=daemon
level=info msg="  --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon
level=info msg="  --bpf-policy-map-max='16384'" subsys=daemon
level=info msg="  --bpf-root='/sys/fs/bpf'" subsys=daemon
level=info msg="  --bpf-sock-rev-map-max='262144'" subsys=daemon
level=info msg="  --bypass-ip-availability-upon-restore='false'" subsys=daemon
level=info msg="  --certificates-directory='/var/run/cilium/certs'" subsys=daemon
level=info msg="  --cflags=''" subsys=daemon
level=info msg="  --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon
level=info msg="  --cilium-endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --cluster-health-port='4240'" subsys=daemon
level=info msg="  --cluster-id='0'" subsys=daemon
level=info msg="  --cluster-name='default'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-mask-size='24'" subsys=daemon
level=info msg="  --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon
level=info msg="  --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon
level=info msg="  --cmdref=''" subsys=daemon
level=info msg="  --cni-chaining-mode='none'" subsys=daemon
level=info msg="  --cni-chaining-target=''" subsys=daemon
level=info msg="  --cni-exclusive='true'" subsys=daemon
level=info msg="  --cni-external-routing='false'" subsys=daemon
level=info msg="  --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon
level=info msg="  --cnp-node-status-gc-interval='0s'" subsys=daemon
level=info msg="  --config=''" subsys=daemon
level=info msg="  --config-dir='/tmp/cilium/config-map'" subsys=daemon
level=info msg="  --config-sources='config-map:kube-system/cilium-config'" subsys=daemon
level=info msg="  --conntrack-gc-interval='0s'" subsys=daemon
level=info msg="  --conntrack-gc-max-interval='0s'" subsys=daemon
level=info msg="  --crd-wait-timeout='5m0s'" subsys=daemon
level=info msg="  --custom-cni-conf='false'" subsys=daemon
level=info msg="  --datapath-mode='veth'" subsys=daemon
level=info msg="  --debug='false'" subsys=daemon
level=info msg="  --debug-verbose=''" subsys=daemon
level=info msg="  --derive-masquerade-ip-addr-from-device=''" subsys=daemon
level=info msg="  --devices=''" subsys=daemon
level=info msg="  --direct-routing-device=''" subsys=daemon
level=info msg="  --disable-cnp-status-updates='true'" subsys=daemon
level=info msg="  --disable-endpoint-crd='false'" subsys=daemon
level=info msg="  --disable-envoy-version-check='false'" subsys=daemon
level=info msg="  --disable-iptables-feeder-rules=''" subsys=daemon
level=info msg="  --dns-max-ips-per-restored-rule='1000'" subsys=daemon
level=info msg="  --dns-policy-unload-on-shutdown='false'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-limit='0'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon
level=info msg="  --dnsproxy-enable-transparent-mode='true'" subsys=daemon
level=info msg="  --dnsproxy-lock-count='128'" subsys=daemon
level=info msg="  --dnsproxy-lock-timeout='500ms'" subsys=daemon
level=info msg="  --egress-gateway-policy-map-max='16384'" subsys=daemon
level=info msg="  --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon
level=info msg="  --egress-masquerade-interfaces=''" subsys=daemon
level=info msg="  --egress-multi-home-ip-rule-compat='false'" subsys=daemon
level=info msg="  --enable-auto-protect-node-port-range='true'" subsys=daemon
level=info msg="  --enable-bandwidth-manager='false'" subsys=daemon
level=info msg="  --enable-bbr='false'" subsys=daemon
level=info msg="  --enable-bgp-control-plane='false'" subsys=daemon
level=info msg="  --enable-bpf-clock-probe='false'" subsys=daemon
level=info msg="  --enable-bpf-masquerade='false'" subsys=daemon
level=info msg="  --enable-bpf-tproxy='false'" subsys=daemon
level=info msg="  --enable-cilium-api-server-access='*'" subsys=daemon
level=info msg="  --enable-cilium-endpoint-slice='false'" subsys=daemon
level=info msg="  --enable-cilium-health-api-server-access='*'" subsys=daemon
level=info msg="  --enable-custom-calls='false'" subsys=daemon
level=info msg="  --enable-endpoint-health-checking='true'" subsys=daemon
level=info msg="  --enable-endpoint-routes='false'" subsys=daemon
level=info msg="  --enable-envoy-config='false'" subsys=daemon
level=info msg="  --enable-external-ips='false'" subsys=daemon
level=info msg="  --enable-health-check-nodeport='true'" subsys=daemon
level=info msg="  --enable-health-checking='true'" subsys=daemon
level=info msg="  --enable-high-scale-ipcache='false'" subsys=daemon
level=info msg="  --enable-host-firewall='false'" subsys=daemon
level=info msg="  --enable-host-legacy-routing='false'" subsys=daemon
level=info msg="  --enable-host-port='false'" subsys=daemon
level=info msg="  --enable-hubble='false'" subsys=daemon
level=info msg="  --enable-hubble-recorder-api='true'" subsys=daemon
level=info msg="  --enable-icmp-rules='true'" subsys=daemon
level=info msg="  --enable-identity-mark='true'" subsys=daemon
level=info msg="  --enable-ip-masq-agent='false'" subsys=daemon
level=info msg="  --enable-ipsec='false'" subsys=daemon
level=info msg="  --enable-ipsec-key-watcher='true'" subsys=daemon
level=info msg="  --enable-ipv4='true'" subsys=daemon
level=info msg="  --enable-ipv4-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv4-egress-gateway='false'" subsys=daemon
level=info msg="  --enable-ipv4-fragment-tracking='true'" subsys=daemon
level=info msg="  --enable-ipv4-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6='false'" subsys=daemon
level=info msg="  --enable-ipv6-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv6-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6-ndp='false'" subsys=daemon
level=info msg="  --enable-k8s='true'" subsys=daemon
level=info msg="  --enable-k8s-api-discovery='false'" subsys=daemon
level=info msg="  --enable-k8s-endpoint-slice='true'" subsys=daemon
level=info msg="  --enable-k8s-event-handover='false'" subsys=daemon
level=info msg="  --enable-k8s-networkpolicy='true'" subsys=daemon
level=info msg="  --enable-k8s-terminating-endpoint='true'" subsys=daemon
level=info msg="  --enable-l2-announcements='false'" subsys=daemon
level=info msg="  --enable-l2-neigh-discovery='true'" subsys=daemon
level=info msg="  --enable-l2-pod-announcements='false'" subsys=daemon
level=info msg="  --enable-l7-proxy='true'" subsys=daemon
level=info msg="  --enable-local-node-route='true'" subsys=daemon
level=info msg="  --enable-local-redirect-policy='false'" subsys=daemon
level=info msg="  --enable-mke='false'" subsys=daemon
level=info msg="  --enable-monitor='true'" subsys=daemon
level=info msg="  --enable-nat46x64-gateway='false'" subsys=daemon
level=info msg="  --enable-node-port='false'" subsys=daemon
level=info msg="  --enable-pmtu-discovery='false'" subsys=daemon
level=info msg="  --enable-policy='default'" subsys=daemon
level=info msg="  --enable-recorder='false'" subsys=daemon
level=info msg="  --enable-remote-node-identity='true'" subsys=daemon
level=info msg="  --enable-runtime-device-detection='false'" subsys=daemon
level=info msg="  --enable-sctp='false'" subsys=daemon
level=info msg="  --enable-service-topology='false'" subsys=daemon
level=info msg="  --enable-session-affinity='false'" subsys=daemon
level=info msg="  --enable-srv6='false'" subsys=daemon
level=info msg="  --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon
level=info msg="  --enable-svc-source-range-check='true'" subsys=daemon
level=info msg="  --enable-tracing='false'" subsys=daemon
level=info msg="  --enable-unreachable-routes='false'" subsys=daemon
level=info msg="  --enable-vtep='false'" subsys=daemon
level=info msg="  --enable-well-known-identities='false'" subsys=daemon
level=info msg="  --enable-wireguard='false'" subsys=daemon
level=info msg="  --enable-wireguard-userspace-fallback='false'" subsys=daemon
level=info msg="  --enable-xdp-prefilter='false'" subsys=daemon
level=info msg="  --enable-xt-socket-fallback='true'" subsys=daemon
level=info msg="  --encrypt-interface=''" subsys=daemon
level=info msg="  --encrypt-node='false'" subsys=daemon
level=info msg="  --endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --endpoint-queue-size='25'" subsys=daemon
level=info msg="  --endpoint-status=''" subsys=daemon
level=info msg="  --envoy-config-timeout='2m0s'" subsys=daemon
level=info msg="  --envoy-log=''" subsys=daemon
level=info msg="  --exclude-local-address=''" subsys=daemon
level=info msg="  --external-envoy-proxy='false'" subsys=daemon
level=info msg="  --fixed-identity-mapping=''" subsys=daemon
level=info msg="  --fqdn-regex-compile-lru-size='1024'" subsys=daemon
level=info msg="  --gops-port='9890'" subsys=daemon
level=info msg="  --http-403-msg=''" subsys=daemon
level=info msg="  --http-idle-timeout='0'" subsys=daemon
level=info msg="  --http-max-grpc-timeout='0'" subsys=daemon
level=info msg="  --http-normalize-path='true'" subsys=daemon
level=info msg="  --http-request-timeout='3600'" subsys=daemon
level=info msg="  --http-retry-count='3'" subsys=daemon
level=info msg="  --http-retry-timeout='0'" subsys=daemon
level=info msg="  --hubble-disable-tls='false'" subsys=daemon
level=info msg="  --hubble-event-buffer-capacity='4095'" subsys=daemon
level=info msg="  --hubble-event-queue-size='0'" subsys=daemon
level=info msg="  --hubble-export-file-compress='false'" subsys=daemon
level=info msg="  --hubble-export-file-max-backups='5'" subsys=daemon
level=info msg="  --hubble-export-file-max-size-mb='10'" subsys=daemon
level=info msg="  --hubble-export-file-path=''" subsys=daemon
level=info msg="  --hubble-listen-address=''" subsys=daemon
level=info msg="  --hubble-metrics=''" subsys=daemon
level=info msg="  --hubble-metrics-server=''" subsys=daemon
level=info msg="  --hubble-monitor-events=''" subsys=daemon
level=info msg="  --hubble-prefer-ipv6='false'" subsys=daemon
level=info msg="  --hubble-recorder-sink-queue-size='1024'" subsys=daemon
level=info msg="  --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon
level=info msg="  --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon
level=info msg="  --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon
level=info msg="  --hubble-tls-cert-file=''" subsys=daemon
level=info msg="  --hubble-tls-client-ca-files=''" subsys=daemon
level=info msg="  --hubble-tls-key-file=''" subsys=daemon
level=info msg="  --identity-allocation-mode='crd'" subsys=daemon
level=info msg="  --identity-change-grace-period='5s'" subsys=daemon
level=info msg="  --identity-gc-interval='15m0s'" subsys=daemon
level=info msg="  --identity-heartbeat-timeout='30m0s'" subsys=daemon
level=info msg="  --identity-restore-grace-period='10m0s'" subsys=daemon
level=info msg="  --install-egress-gateway-routes='false'" subsys=daemon
level=info msg="  --install-iptables-rules='true'" subsys=daemon
level=info msg="  --install-no-conntrack-iptables-rules='false'" subsys=daemon
level=info msg="  --ip-allocation-timeout='2m0s'" subsys=daemon
level=info msg="  --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon
level=info msg="  --ipam='cluster-pool'" subsys=daemon
level=info msg="  --ipam-cilium-node-update-rate='15s'" subsys=daemon
level=info msg="  --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon
level=info msg="  --ipsec-key-file=''" subsys=daemon
level=info msg="  --ipsec-key-rotation-duration='5m0s'" subsys=daemon
level=info msg="  --iptables-lock-timeout='5s'" subsys=daemon
level=info msg="  --iptables-random-fully='false'" subsys=daemon
level=info msg="  --ipv4-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv4-node='auto'" subsys=daemon
level=info msg="  --ipv4-pod-subnets=''" subsys=daemon
level=info msg="  --ipv4-range='auto'" subsys=daemon
level=info msg="  --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon
level=info msg="  --ipv4-service-range='auto'" subsys=daemon
level=info msg="  --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon
level=info msg="  --ipv6-mcast-device=''" subsys=daemon
level=info msg="  --ipv6-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv6-node='auto'" subsys=daemon
level=info msg="  --ipv6-pod-subnets=''" subsys=daemon
level=info msg="  --ipv6-range='auto'" subsys=daemon
level=info msg="  --ipv6-service-range='auto'" subsys=daemon
level=info msg="  --join-cluster='false'" subsys=daemon
level=info msg="  --k8s-api-server=''" subsys=daemon
level=info msg="  --k8s-client-burst='10'" subsys=daemon
level=info msg="  --k8s-client-qps='5'" subsys=daemon
level=info msg="  --k8s-heartbeat-timeout='30s'" subsys=daemon
level=info msg="  --k8s-kubeconfig-path=''" subsys=daemon
level=info msg="  --k8s-namespace='kube-system'" subsys=daemon
level=info msg="  --k8s-require-ipv4-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-require-ipv6-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-service-cache-size='128'" subsys=daemon
level=info msg="  --k8s-service-proxy-name=''" subsys=daemon
level=info msg="  --k8s-sync-timeout='3m0s'" subsys=daemon
level=info msg="  --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon
level=info msg="  --keep-config='false'" subsys=daemon
level=info msg="  --kube-proxy-replacement='disabled'" subsys=daemon
level=info msg="  --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon
level=info msg="  --kvstore=''" subsys=daemon
level=info msg="  --kvstore-connectivity-timeout='2m0s'" subsys=daemon
level=info msg="  --kvstore-lease-ttl='15m0s'" subsys=daemon
level=info msg="  --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon
level=info msg="  --kvstore-opt=''" subsys=daemon
level=info msg="  --kvstore-periodic-sync='5m0s'" subsys=daemon
level=info msg="  --l2-announcements-lease-duration='15s'" subsys=daemon
level=info msg="  --l2-announcements-renew-deadline='5s'" subsys=daemon
level=info msg="  --l2-announcements-retry-period='2s'" subsys=daemon
level=info msg="  --l2-pod-announcements-interface=''" subsys=daemon
level=info msg="  --label-prefix-file=''" subsys=daemon
level=info msg="  --labels=''" subsys=daemon
level=info msg="  --lib-dir='/var/lib/cilium'" subsys=daemon
level=info msg="  --local-max-addr-scope='252'" subsys=daemon
level=info msg="  --local-router-ipv4=''" subsys=daemon
level=info msg="  --local-router-ipv6=''" subsys=daemon
level=info msg="  --log-driver=''" subsys=daemon
level=info msg="  --log-opt=''" subsys=daemon
level=info msg="  --log-system-load='false'" subsys=daemon
level=info msg="  --max-controller-interval='0'" subsys=daemon
level=info msg="  --mesh-auth-enabled='true'" subsys=daemon
level=info msg="  --mesh-auth-gc-interval='5m0s'" subsys=daemon
level=info msg="  --mesh-auth-mutual-listener-port='0'" subsys=daemon
level=info msg="  --mesh-auth-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-signal-backoff-duration='1s'" subsys=daemon
level=info msg="  --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon
level=info msg="  --mesh-auth-spire-admin-socket=''" subsys=daemon
level=info msg="  --metrics=''" subsys=daemon
level=info msg="  --mke-cgroup-mount=''" subsys=daemon
level=info msg="  --monitor-aggregation='medium'" subsys=daemon
level=info msg="  --monitor-aggregation-flags='all'" subsys=daemon
level=info msg="  --monitor-aggregation-interval='5s'" subsys=daemon
level=info msg="  --monitor-queue-size='0'" subsys=daemon
level=info msg="  --mtu='0'" subsys=daemon
level=info msg="  --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon
level=info msg="  --node-port-acceleration='disabled'" subsys=daemon
level=info msg="  --node-port-algorithm='random'" subsys=daemon
level=info msg="  --node-port-bind-protection='true'" subsys=daemon
level=info msg="  --node-port-mode='snat'" subsys=daemon
level=info msg="  --node-port-range='30000,32767'" subsys=daemon
level=info msg="  --nodes-gc-interval='5m0s'" subsys=daemon
level=info msg="  --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon
level=info msg="  --policy-audit-mode='false'" subsys=daemon
level=info msg="  --policy-queue-size='100'" subsys=daemon
level=info msg="  --policy-trigger-interval='1s'" subsys=daemon
level=info msg="  --pprof='false'" subsys=daemon
level=info msg="  --pprof-address='localhost'" subsys=daemon
level=info msg="  --pprof-port='6060'" subsys=daemon
level=info msg="  --preallocate-bpf-maps='false'" subsys=daemon
level=info msg="  --prepend-iptables-chains='true'" subsys=daemon
level=info msg="  --procfs='/host/proc'" subsys=daemon
level=info msg="  --prometheus-serve-addr=':9962'" subsys=daemon
level=info msg="  --proxy-connect-timeout='2'" subsys=daemon
level=info msg="  --proxy-gid='1337'" subsys=daemon
level=info msg="  --proxy-idle-timeout-seconds='60'" subsys=daemon
level=info msg="  --proxy-max-connection-duration-seconds='0'" subsys=daemon
level=info msg="  --proxy-max-requests-per-connection='0'" subsys=daemon
level=info msg="  --proxy-prometheus-port='9964'" subsys=daemon
level=info msg="  --read-cni-conf=''" subsys=daemon
level=info msg="  --remove-cilium-node-taints='true'" subsys=daemon
level=info msg="  --restore='true'" subsys=daemon
level=info msg="  --route-metric='0'" subsys=daemon
level=info msg="  --routing-mode='tunnel'" subsys=daemon
level=info msg="  --set-cilium-is-up-condition='true'" subsys=daemon
level=info msg="  --set-cilium-node-taints='true'" subsys=daemon
level=info msg="  --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon
level=info msg="  --single-cluster-route='false'" subsys=daemon
level=info msg="  --skip-cnp-status-startup-clean='false'" subsys=daemon
level=info msg="  --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon
level=info msg="  --srv6-encap-mode='reduced'" subsys=daemon
level=info msg="  --state-dir='/var/run/cilium'" subsys=daemon
level=info msg="  --synchronize-k8s-nodes='true'" subsys=daemon
level=info msg="  --tofqdns-dns-reject-response-code='refused'" subsys=daemon
level=info msg="  --tofqdns-enable-dns-compression='true'" subsys=daemon
level=info msg="  --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon
level=info msg="  --tofqdns-idle-connection-grace-period='0s'" subsys=daemon
level=info msg="  --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon
level=info msg="  --tofqdns-min-ttl='0'" subsys=daemon
level=info msg="  --tofqdns-pre-cache=''" subsys=daemon
level=info msg="  --tofqdns-proxy-port='0'" subsys=daemon
level=info msg="  --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon
level=info msg="  --trace-payloadlen='128'" subsys=daemon
level=info msg="  --trace-sock='true'" subsys=daemon
level=info msg="  --tunnel=''" subsys=daemon
level=info msg="  --tunnel-port='6082'" subsys=daemon
level=info msg="  --tunnel-protocol='geneve'" subsys=daemon
level=info msg="  --unmanaged-pod-watcher-interval='15'" subsys=daemon
level=info msg="  --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon
level=info msg="  --version='false'" subsys=daemon
level=info msg="  --vlan-bpf-bypass=''" subsys=daemon
level=info msg="  --vtep-cidr=''" subsys=daemon
level=info msg="  --vtep-endpoint=''" subsys=daemon
level=info msg="  --vtep-mac=''" subsys=daemon
level=info msg="  --vtep-mask=''" subsys=daemon
level=info msg="  --wireguard-encapsulate='false'" subsys=daemon
level=info msg="  --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon
level=info msg="     _ _ _" subsys=daemon
level=info msg=" ___|_| |_|_ _ _____" subsys=daemon
level=info msg="|  _| | | | | |     |" subsys=daemon
level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon
level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon
level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath
level=info msg="linking environment: OK!" subsys=linux-datapath
level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes
level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf
level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups
level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter
level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter
level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter
level=info msg=" - reserved:.*" subsys=labels-filter
level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter
level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter
level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:io\\.kubernetes" subsys=labels-filter
level=info msg=" - !:kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:k8s\\.io" subsys=labels-filter
level=info msg=" - !:pod-template-generation" subsys=labels-filter
level=info msg=" - !:pod-template-hash" subsys=labels-filter
level=info msg=" - !:controller-revision-hash" subsys=labels-filter
level=info msg=" - !:annotation.*" subsys=labels-filter
level=info msg=" - !:etcd_node" subsys=labels-filter
level=info msg=Invoked duration=1.025775ms function="pprof.glob..func1 (cell.go:50)" subsys=hive
level=info msg=Invoked duration="84.372µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive
level=info msg=Invoked duration="993.033µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive
level=info msg=Invoked duration="12.46µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive
level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate
level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth
level=info msg=Invoked duration=100.410919ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive
level=info msg=Invoked duration="10.47µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive
level=info msg=Invoked duration="14.161µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive
level=info msg=Invoked duration="47.721µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive
level=info msg=Invoked duration="46.89µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive
level=info msg=Invoked duration="59.971µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive
level=info msg=Starting subsys=hive
level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops
level=info msg="Start hook executed" duration="397.546µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive
level=info msg="Start hook executed" duration="1.34µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive
level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client
level=info msg="Serving prometheus metrics on :9962" subsys=metrics
level=info msg="Connected to apiserver" subsys=k8s-client
level=info msg="Start hook executed" duration=7.973692ms function="client.(*compositeClientset).onStart" subsys=hive
level=info msg="Start hook executed" duration=5.67818ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive
level=info msg="Start hook executed" duration="52.342µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="62.861µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive
level=info msg="Start hook executed" duration="242.644µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="93.51µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive
level=info msg="Start hook executed" duration="58.04µs" function="*cni.cniConfigManager.Start" subsys=hive
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Start hook executed" duration=42.467918ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive
level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath
level=info msg="Start hook executed" duration="73.131µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive
level=info msg="Start hook executed" duration="8.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive
level=info msg="Start hook executed" duration="1.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive
level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.240.0.0/16
level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon
level=info msg="Start hook executed" duration=103.435095ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive
level=info msg="Start hook executed" duration="4.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration=101.00091ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration="3.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s
level=info msg="Start hook executed" duration=200.835544ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Start hook executed" duration="4.501µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive
level=info msg="Start hook executed" duration="2.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive
level=info msg="Start hook executed" duration="1.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="1.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="1.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive
level=info msg="Start hook executed" duration="23.961µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive
level=info msg="Start hook executed" duration="17.521µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive
level=info msg="Start hook executed" duration="39.33µs" function="*manager.manager.Start" subsys=hive
level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent
level=info msg="Start hook executed" duration="289.584µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive
level=info msg="Start hook executed" duration="3.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="9µs" function="*job.group.Start" subsys=hive
level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager
level=info msg="Start hook executed" duration="314.515µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive
level=info msg="Start hook executed" duration="372.954µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive
level=info msg="Datapath signal listener running" subsys=signal
level=info msg="Start hook executed" duration=1.226306ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive
level=info msg="Start hook executed" duration="4.74µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive
level=info msg="Start hook executed" duration="22.53µs" function="*job.group.Start" subsys=hive
level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon
level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon
level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.240 mtu=1500 subsys=mtu
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf
level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service
level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service
level=info msg="Reading old endpoints..." subsys=daemon
level=info msg="No old endpoints found." subsys=daemon
level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s
level=info msg="All Cilium CRDs have been found and are available" subsys=k8s
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery
level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.240 ipAddr.ipv6="<nil>" k8sNodeIP=199.204.45.240 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon
level=info msg="Detected devices" devices="[]" subsys=linux-datapath
level=info msg="Enabling k8s event listener" subsys=k8s-watcher
level=info msg="Removing stale endpoint interfaces" subsys=daemon
level=info msg="Skipping kvstore configuration" subsys=daemon
level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher
level=info msg="Initializing node addressing" subsys=daemon
level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="Restoring endpoints..." subsys=daemon
level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon
level=info msg="Addressing information:" subsys=daemon
level=info msg="  Cluster-Name: default" subsys=daemon
level=info msg="  Cluster-ID: 0" subsys=daemon
level=info msg="  Local node-name: instance" subsys=daemon
level=info msg="  Node-IPv6: <nil>" subsys=daemon
level=info msg="  External-Node IPv4: 199.204.45.240" subsys=daemon
level=info msg="  Internal-Node IPv4: 10.0.0.147" subsys=daemon
level=info msg="  IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon
level=info msg="  Loopback IPv4: 169.254.42.1" subsys=daemon
level=info msg="  Local IPv4 addresses:" subsys=daemon
level=info msg="  - 199.204.45.240" subsys=daemon
level=info msg="  - 172.17.0.100" subsys=daemon
level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager
level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.240} {CiliumInternalIP 10.0.0.147}] 10.0.0.0/24 [] <nil> [] 10.0.0.173 <nil> <nil> <nil> 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher
level=info msg="Initializing identity allocator" subsys=identity-cache
level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0
level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="<nil>" subsys=datapath-loader
level=info msg="Iptables rules installed" subsys=iptables
level=info msg="Adding new proxy port rules for cilium-dns-egress:45593" id=cilium-dns-egress subsys=proxy
level=info msg="Iptables proxy rules installed" subsys=iptables
level=info msg="Start hook executed" duration=2.349187258s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive
level=info msg="Starting IP identity watcher" subsys=ipcache
level=info msg="Start hook executed" duration="25.821µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive
level=info msg="Initializing daemon" subsys=daemon
level=info msg="Start hook executed" duration="6.78µs" function="*job.group.Start" subsys=hive
level=info msg="Start hook executed" duration="33.821µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive
level=info msg="Start hook executed" duration="4.55µs" function="*job.group.Start" subsys=hive
level=info msg="Validating configured node address ranges" subsys=daemon
level=info msg="Starting connection tracking garbage collector" subsys=daemon
level=info msg="Initial scan of connection tracking completed" subsys=ct-gc
level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon
level=info msg="Creating host endpoint" subsys=daemon
level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service
level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Launching Cilium health daemon" subsys=daemon
level=info msg="Launching Cilium health endpoint" subsys=daemon
level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon
level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon
level=info msg="processing 0 queued deletion requests" subsys=daemon
level=info msg="Initializing Cilium API" subsys=daemon
level=info msg="Daemon initialization completed" bootstrapTime=3.378431602s subsys=daemon
level=info msg="Hubble server is disabled" subsys=hubble
level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.143 0a1bf565-16df-4e9f-8188-d6d3eb7c06eb default   }" containerID=dc682df0182a814155e62f18413b590edd94c249914cd295e47ec86fa1157fa8 datapathConfiguration="&{false false false false false <nil>}" interface=lxc200ac205fa1e k8sPodName=kube-system/coredns-67d79cf957-tnnmh labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=dc682df018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=dc682df018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=dc682df018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=dc682df018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=49460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=dc682df018 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=49460 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.230 5fe3428d-4d71-498c-b8b1-d570f431858a default   }" containerID=84cc9a66f9f892dcfadd2dee23b50c6ab1f4c04e3fb0bfd9b5dec1bc283c5921 datapathConfiguration="&{false false false false false <nil>}" interface=lxcade7b818f517 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=84cc9a66f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=84cc9a66f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a66909f1-3824-4302-867b-be52f6a281c5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a66909f1-3824-4302-867b-be52f6a281c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a66909f1-3824-4302-867b-be52f6a281c5;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a66909f1-3824-4302-867b-be52f6a281c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=84cc9a66f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=24405 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a66909f1-3824-4302-867b-be52f6a281c5,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a66909f1-3824-4302-867b-be52f6a281c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=84cc9a66f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=24405 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk subsys=endpoint
level=info msg="Compiled new BPF template" BPFCompilationTime=334.476099ms file-path=/var/run/cilium/state/templates/8eae58f9a9f9ee6cceef4d6316a4cec290539801825d120132f687a009c8f80d/bpf_host.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=69 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=4 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Compiled new BPF template" BPFCompilationTime=1.132024055s file-path=/var/run/cilium/state/templates/e9e1333ea60d7190be83286aa48624ace787b7d5600266f29d9407302dbda519/bpf_lxc.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID=84cc9a66f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3071 identity=24405 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk subsys=endpoint
level=info msg="Successful endpoint creation" containerID=84cc9a66f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3071 identity=24405 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=857 identity=4 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=dc682df018 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=395 identity=49460 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh subsys=endpoint
level=info msg="Successful endpoint creation" containerID=dc682df018 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=395 identity=49460 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh subsys=daemon
level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=84cc9a66f9 endpointID=3071 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-4bzhk subsys=daemon
level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a66909f1-3824-4302-867b-be52f6a281c5 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a66909f1-3824-4302-867b-be52f6a281c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator
level=info msg="Removed endpoint" containerID=84cc9a66f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3071 identity=24405 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bzhk subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.148 1fd720f0-f06d-4883-a5a8-68e1abc4efc1 default   }" containerID=044e9314e32033528fea793bd181de9b86f99a538a0c0b5b3a345f2618b4cdf0 datapathConfiguration="&{false false false false false <nil>}" interface=lxc27e0f073fecc k8sPodName=envoy-gateway-system/envoy-gateway-8b6d98d9b-8n67s labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=044e9314e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 ipv4=10.0.0.148 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-8b6d98d9b-8n67s subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=044e9314e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.148 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-8b6d98d9b-8n67s subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=044e9314e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=10726 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.148 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-8b6d98d9b-8n67s oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=044e9314e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=10726 ipv4=10.0.0.148 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-8b6d98d9b-8n67s subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=044e9314e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=943 identity=10726 ipv4=10.0.0.148 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-8b6d98d9b-8n67s subsys=endpoint
level=info msg="Successful endpoint creation" containerID=044e9314e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=943 identity=10726 ipv4=10.0.0.148 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-8b6d98d9b-8n67s subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=69 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00069 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00069 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00069 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00069:pending" subsys=bpf
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=69 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.87 9b60919d-683d-4ac0-b195-016c377bd46e default   }" containerID=53f1f2baa1ed59daa0d74bc7e7d473eade80ceebc9c52976bd99e1e183a2c37a datapathConfiguration="&{false false false false false <nil>}" interface=lxc1a573444399d k8sPodName=kube-system/coredns-5cd68b5dbf-xcdfh labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=53f1f2baa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-xcdfh subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=53f1f2baa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-xcdfh subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=53f1f2baa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=49460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-xcdfh oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=53f1f2baa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=49460 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-xcdfh subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=53f1f2baa1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1163 identity=49460 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-xcdfh subsys=endpoint
level=info msg="Successful endpoint creation" containerID=53f1f2baa1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1163 identity=49460 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-xcdfh subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.192 0d8b94d1-e9fd-41a8-ad86-a48910856568 default   }" containerID=859dcb113d32ba6bba933b513511a9fdb22cc751983ee87ae96d3eda6a46508d datapathConfiguration="&{false false false false false <nil>}" interface=lxc5acd10cae6af k8sPodName=kube-system/coredns-5cd68b5dbf-45rhb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=859dcb113d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-45rhb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=859dcb113d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-45rhb subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=859dcb113d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=49460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-45rhb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=859dcb113d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=49460 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-45rhb subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=859dcb113d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=219 identity=49460 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-45rhb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=859dcb113d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=219 identity=49460 ipv4=10.0.0.192 ipv6= k8sPodName=kube-system/coredns-5cd68b5dbf-45rhb subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.59 69d2b0b4-b9c2-4dec-aceb-35072129145c default   }" containerID=44b420917b6347c2417a85c59d6d23845a14b73defeb0e0e576687304b903343 datapathConfiguration="&{false false false false false <nil>}" interface=lxca234b0d2b50e k8sPodName=local-path-storage/local-path-provisioner-f76d6fbd5-4jtzm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=44b420917b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-f76d6fbd5-4jtzm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=44b420917b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-f76d6fbd5-4jtzm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=44b420917b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=45207 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-f76d6fbd5-4jtzm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=44b420917b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=45207 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-f76d6fbd5-4jtzm subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=44b420917b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=51 identity=45207 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-f76d6fbd5-4jtzm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=44b420917b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=51 identity=45207 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/local-path-provisioner-f76d6fbd5-4jtzm subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=dc682df018 endpointID=395 k8sNamespace=kube-system k8sPodName=coredns-67d79cf957-tnnmh subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator
level=info msg="Removed endpoint" containerID=dc682df018 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=395 identity=49460 ipv4=10.0.0.143 ipv6= k8sPodName=kube-system/coredns-67d79cf957-tnnmh subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.119 4a1eaa66-eb4d-49cf-a888-b08a044b64dd default   }" containerID=6341f3a2c4c1a26b836249c59a5a0f9a708d0c095614ca6ec5d9aee4aa71c4b8 datapathConfiguration="&{false false false false false <nil>}" interface=lxc6a72c6b7296e k8sPodName=cert-manager/cert-manager-cainjector-68c8cf9856-c52x6 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6341f3a2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-68c8cf9856-c52x6 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6341f3a2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-68c8cf9856-c52x6 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=6341f3a2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=488 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-68c8cf9856-c52x6 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6341f3a2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=488 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-68c8cf9856-c52x6 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.43 44d0a1d4-218f-4972-9b65-1c17af80b2dc default   }" containerID=83f28be23287daa027f3be1e70e68ed09056d126ca4f2ac78cef42ee4f0062e5 datapathConfiguration="&{false false false false false <nil>}" interface=lxc1635b8ce2dd0 k8sPodName=cert-manager/cert-manager-webhook-569965799c-dkz78 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=83f28be232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-webhook-569965799c-dkz78 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=83f28be232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-webhook-569965799c-dkz78 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Create endpoint request" addressing="&{10.0.0.88 aa700a83-19b2-4408-addc-52553778239f default   }" containerID=0f0a11ad3c8683e19bbdcac10908fd96adc5344d1e227bdaf71f57afd375e9bf datapathConfiguration="&{false false false false false <nil>}" interface=lxcc1f5ad7e019a k8sPodName=cert-manager/cert-manager-5cb6759ff6-4kcqh labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0f0a11ad3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-5cb6759ff6-4kcqh subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0f0a11ad3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-5cb6759ff6-4kcqh subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=83f28be232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=29712 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-webhook-569965799c-dkz78 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=83f28be232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=29712 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-webhook-569965799c-dkz78 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=0f0a11ad3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=43648 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-5cb6759ff6-4kcqh oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0f0a11ad3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=43648 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-5cb6759ff6-4kcqh subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6341f3a2c4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2872 identity=488 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-68c8cf9856-c52x6 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6341f3a2c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2872 identity=488 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-68c8cf9856-c52x6 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=83f28be232 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3446 identity=29712 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-webhook-569965799c-dkz78 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=83f28be232 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3446 identity=29712 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-webhook-569965799c-dkz78 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=0f0a11ad3c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=388 identity=43648 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-5cb6759ff6-4kcqh subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0f0a11ad3c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=388 identity=43648 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-5cb6759ff6-4kcqh subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.42 8145101f-2741-4958-8b2b-3dce6320732a default   }" containerID=17151244c92d3ff6fb9711d870f7d2aa53b4b43aa1bbada874c86881b4218f15 datapathConfiguration="&{false false false false false <nil>}" interface=lxce76468a8acb1 k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=17151244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=17151244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=17151244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 identity=48433 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=17151244c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3554 identity=48433 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=17151244c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3554 identity=48433 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w subsys=endpoint
level=info msg="Successful endpoint creation" containerID=17151244c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3554 identity=48433 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=17151244c9 endpointID=3554 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-22b4w subsys=daemon
level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=97be0780-eae3-42b8-bef8-9a369cea3fa9 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator
level=info msg="Removed endpoint" containerID=17151244c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3554 identity=48433 ipv4=10.0.0.42 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-22b4w subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.229 2d44b116-601d-4051-9287-1c37003cf2f0 default   }" containerID=4b10891a0f0f187b18cfd3c37552987d1fd1ae963f5b38d4de35855feefccb7a datapathConfiguration="&{false false false false false <nil>}" interface=lxc8e045079ad3c k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4b10891a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4b10891a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator
level=info msg="Invalid state transition skipped" containerID=4b10891a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q line=611 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=4b10891a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=34317 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4b10891a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=34317 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=4b10891a0f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=547 identity=34317 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4b10891a0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=547 identity=34317 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=4b10891a0f endpointID=547 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-blv6q subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=79276327-c93e-49b2-9208-2dcf44f1aaa5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator
level=info msg="Removed endpoint" containerID=4b10891a0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=547 identity=34317 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-blv6q subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.179 d71081db-6503-4577-90fa-a51892b570b7 default   }" containerID=3ee5fb172005f7294a638ce8f1df931b957d0e5da7d9940f8ca9be16d250da7d datapathConfiguration="&{false false false false false <nil>}" interface=lxcf590a39c4433 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-5564c8bc8b-9tx9x labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=3ee5fb1720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-5564c8bc8b-9tx9x subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=3ee5fb1720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-5564c8bc8b-9tx9x subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=3ee5fb1720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=37740 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-5564c8bc8b-9tx9x oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=3ee5fb1720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=37740 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-5564c8bc8b-9tx9x subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=3ee5fb1720 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1173 identity=37740 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-5564c8bc8b-9tx9x subsys=endpoint
level=info msg="Successful endpoint creation" containerID=3ee5fb1720 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1173 identity=37740 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-5564c8bc8b-9tx9x subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.230 e6ad0474-3733-43e6-9643-98283c7ab8c4 default   }" containerID=70b567bb22d1f8197a7e2679cc1a77fe73dcce4ba3e7323eee6aa995d28d8914 datapathConfiguration="&{false false false false false <nil>}" interface=lxceddf324e44fa k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=70b567bb22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=70b567bb22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=70b567bb22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=4212 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=70b567bb22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=4212 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=70b567bb22 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1073 identity=4212 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=70b567bb22 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1073 identity=4212 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=70b567bb22 endpointID=1073 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-298jm subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=1adc2b2e-6dce-4b34-b4f8-4a0a12a4222b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator
level=info msg="Removed endpoint" containerID=70b567bb22 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1073 identity=4212 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-298jm subsys=endpoint
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=19eb0571-d912-4e64-94e6-4852f0542d2a] Description:}]" policyAddRequest=36c27c33-1edf-49b6-9c9f-68f0f1e0a423 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher
level=info msg="Policy imported via API, recalculating..." policyAddRequest=36c27c33-1edf-49b6-9c9f-68f0f1e0a423 policyRevision=2 subsys=daemon
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d607ee40-3212-4207-a699-d3aafd54ba83] Description:}]" policyAddRequest=91048dcf-b4ac-445a-bc6a-972d4cd57964 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=91048dcf-b4ac-445a-bc6a-972d4cd57964 policyRevision=3 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.114 2d1965d8-90f1-4e7d-8851-fa8e1d65603e default   }" containerID=e645e8d5edaae3e5fb1797952f014b95348105725349a37d3ce9feaa63a52cc5 datapathConfiguration="&{false false false false false <nil>}" interface=lxcdab1b49484ec k8sPodName=openstack/rabbitmq-cluster-operator-685575d46-rqq9l labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e645e8d5ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-685575d46-rqq9l subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e645e8d5ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-685575d46-rqq9l subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e645e8d5ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identity=16946 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-685575d46-rqq9l oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e645e8d5ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3058 identity=16946 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-685575d46-rqq9l subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=e645e8d5ed datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3058 identity=16946 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-685575d46-rqq9l subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e645e8d5ed datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3058 identity=16946 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-685575d46-rqq9l subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.140 2160ee0c-6c99-4c79-85e3-65c522e37355 default   }" containerID=c51501fdd4dce1bf71ef38e03f6842463ac25b3892fd8277229ade48d1083951 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc8f690739cad k8sPodName=openstack/rabbitmq-messaging-topology-operator-5f96946cf9-rrl4j labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=c51501fdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5f96946cf9-rrl4j subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=c51501fdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5f96946cf9-rrl4j subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=c51501fdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=54282 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5f96946cf9-rrl4j oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=c51501fdd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=54282 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5f96946cf9-rrl4j subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=c51501fdd4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3752 identity=54282 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5f96946cf9-rrl4j subsys=endpoint
level=info msg="Successful endpoint creation" containerID=c51501fdd4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3752 identity=54282 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5f96946cf9-rrl4j subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.171 f8b68a30-9600-4c77-8904-05086c0f2192 default   }" containerID=1801994a34f6d08783b0bbebb0e8a6603e3d4f438afeae86e454ec198f8354a5 datapathConfiguration="&{false false false false false <nil>}" interface=lxc3374276b996f k8sPodName=openstack/pxc-operator-78f656bff9-m8kgw labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=1801994a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/pxc-operator-78f656bff9-m8kgw subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1801994a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/pxc-operator-78f656bff9-m8kgw subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=1801994a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=8743 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/pxc-operator-78f656bff9-m8kgw oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1801994a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=161 identity=8743 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/pxc-operator-78f656bff9-m8kgw subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=1801994a34 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=161 identity=8743 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/pxc-operator-78f656bff9-m8kgw subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1801994a34 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=161 identity=8743 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/pxc-operator-78f656bff9-m8kgw subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.190 a8795a32-7f19-42d3-b7d6-aaf7c2d0b50c default   }" containerID=2022491cd5d4fb7bb31e69adba49536609e2ea909ad1d159ad3f2158a4b12322 datapathConfiguration="&{false false false false false <nil>}" interface=lxc29ead781602d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=2022491cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=2022491cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=2022491cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identity=41753 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=2022491cd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identity=41753 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=2022491cd5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=814 identity=41753 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=2022491cd5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=814 identity=41753 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.182 6b302e0f-75ae-4478-8549-e0a3838a8c26 default   }" containerID=18c6ac551bd05156a1a0a74374a54dffcd32238a12654bfff619af518236885a datapathConfiguration="&{false false false false false <nil>}" interface=lxce822116b1928 k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=18c6ac551b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=18c6ac551b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=18c6ac551b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=52210 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=18c6ac551b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=52210 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=18c6ac551b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1107 identity=52210 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=18c6ac551b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1107 identity=52210 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=18c6ac551b endpointID=1107 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=18c6ac551b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1107 identity=52210 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-808ccd03-78eb-4f4b-ae38-d9ee5a20a238 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.133 fd89ca70-696c-47e1-ab30-7a686f76f1a9 default   }" containerID=7313fc42edd6817c4e349aded10e40aff22b68bac9ee0d6a5691ab853f3b6f76 datapathConfiguration="&{false false false false false <nil>}" interface=lxc32cda15d50fd k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=7313fc42ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=7313fc42ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=7313fc42ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=39506 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=7313fc42ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=959 identity=39506 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=7313fc42ed datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=959 identity=39506 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=7313fc42ed datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=959 identity=39506 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.191 ca6d162d-c2d9-451c-932d-3c773c82565b default   }" containerID=b76e86e52d836b0fa77a4e6688534eaa921d388cef5aaef8dcbdeb9dcb3d44ee datapathConfiguration="&{false false false false false <nil>}" interface=lxcf528eb124acc k8sPodName=openstack/memcached-memcached-5d7dc9997d-gmsdg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b76e86e52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-5d7dc9997d-gmsdg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b76e86e52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-5d7dc9997d-gmsdg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b76e86e52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=756 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-5d7dc9997d-gmsdg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b76e86e52d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=756 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-5d7dc9997d-gmsdg subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=b76e86e52d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2443 identity=756 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-5d7dc9997d-gmsdg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b76e86e52d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2443 identity=756 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-5d7dc9997d-gmsdg subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=b57027f7-7e05-41e6-b7b9-3065dc602e5c] Description:}]" policyAddRequest=10aa95b5-f912-424c-b3ed-34679b3d7d9d subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher
level=info msg="Policy imported via API, recalculating..." policyAddRequest=10aa95b5-f912-424c-b3ed-34679b3d7d9d policyRevision=4 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.111 5977007f-47e0-4808-bcda-3ea50ef417bc default   }" containerID=7cf2858d5fbfb52b0ac64c317aad95581101784b6dd8c82ccea48ee17a112634 datapathConfiguration="&{false false false false false <nil>}" interface=lxc9a0255fd5027 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=7cf2858d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=7cf2858d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=7cf2858d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=1899 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=7cf2858d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=1899 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=7cf2858d5f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=52 identity=1899 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=7cf2858d5f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=52 identity=1899 ipv4=10.0.0.111 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03841969264245886 newInterval=7m30s subsys=map-ct
level=info msg="Create endpoint request" addressing="&{10.0.0.98 2e302e08-7912-4697-8f6c-e5372b3260c4 default   }" containerID=d59e24944a65020032f0a474972cd6510ebbc4ec7db731674d6e5e42738e9438 datapathConfiguration="&{false false false false false <nil>}" interface=lxc05c12454df98 k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d59e24944a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 ipv4=10.0.0.98 ipv6= k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d59e24944a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.98 ipv6= k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=d59e24944a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d59e24944a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=6796 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.98 ipv6= k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d59e24944a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=6796 ipv4=10.0.0.98 ipv6= k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=d59e24944a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1707 identity=6796 ipv4=10.0.0.98 ipv6= k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d59e24944a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1707 identity=6796 ipv4=10.0.0.98 ipv6= k8sPodName=secretgen-controller/secretgen-controller-597c48d55d-xgqtk subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.230 c96631c7-f4ec-4870-a9a0-497256b34e7c default   }" containerID=44113de69d539bf1369effc2f8d20d72d28042f24f2a1d848c64e876730759f5 datapathConfiguration="&{false false false false false <nil>}" interface=lxc9bec1391ee9d k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=44113de69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=44113de69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=44113de69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=8621 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=44113de69d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=8621 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=44113de69d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=274 identity=8621 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr subsys=endpoint
level=info msg="Successful endpoint creation" containerID=44113de69d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=274 identity=8621 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=44113de69d endpointID=274 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-rl5gr subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=71fb3d05-bfa3-48cb-a670-898ee129ceca k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=44113de69d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=274 identity=8621 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rl5gr subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.104 5673505f-b82f-4de8-a5c7-84701d16c74b default   }" containerID=24165c7e328d6405e5190d4979100771fe133a391bb7c9f5303c229e7af7e2b2 datapathConfiguration="&{false false false false false <nil>}" interface=lxcfafa13f3a9fa k8sPodName=monitoring/kube-prometheus-stack-operator-5cc68d98d6-q5msb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=24165c7e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-5cc68d98d6-q5msb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=24165c7e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-5cc68d98d6-q5msb subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=24165c7e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=43378 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-5cc68d98d6-q5msb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=24165c7e32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=43378 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-5cc68d98d6-q5msb subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.250 c04e8431-9b3f-4a2e-bbe2-8825010a8300 default   }" containerID=85db03ece58fa005f04d3e17ed241a65bc31f9c911778b9fefdd1dcc1efa138f datapathConfiguration="&{false false false false false <nil>}" interface=lxc96e4f3a88d81 k8sPodName=monitoring/kube-prometheus-stack-grafana-5544db5f64-f8mxg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=85db03ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544db5f64-f8mxg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=85db03ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544db5f64-f8mxg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Create endpoint request" addressing="&{10.0.0.53 4f5ea55f-275d-40cf-9579-2dc0e56899af default   }" containerID=f23e6cad894f7f8121a21dae6ef1b3222e5f80af0aff93ddeb1b958a01a0cd88 datapathConfiguration="&{false false false false false <nil>}" interface=lxcffe0f5734074 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-57d7f9b544-cw6xg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f23e6cad89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-57d7f9b544-cw6xg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f23e6cad89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-57d7f9b544-cw6xg subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Identity of endpoint changed" containerID=85db03ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=41032 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544db5f64-f8mxg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=85db03ece5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2731 identity=41032 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544db5f64-f8mxg subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f23e6cad89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=33100 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-57d7f9b544-cw6xg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f23e6cad89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3614 identity=33100 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-57d7f9b544-cw6xg subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=24165c7e32 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=60 identity=43378 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-5cc68d98d6-q5msb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=24165c7e32 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=60 identity=43378 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-5cc68d98d6-q5msb subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=85db03ece5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2731 identity=41032 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544db5f64-f8mxg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=85db03ece5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2731 identity=41032 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5544db5f64-f8mxg subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=f23e6cad89 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3614 identity=33100 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-57d7f9b544-cw6xg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f23e6cad89 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3614 identity=33100 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-57d7f9b544-cw6xg subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.138 b84f83ad-77e1-4adc-a683-d76ea68dab45 default   }" containerID=e1d9a3828a2bc55e952a2196c59e17aa98b5f76e1294b145f482d29afeb98c3d datapathConfiguration="&{false false false false false <nil>}" interface=lxc75a9e308408d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e1d9a3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e1d9a3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e1d9a3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=14933 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e1d9a3828a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1672 identity=14933 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e1d9a3828a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1672 identity=14933 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e1d9a3828a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1672 identity=14933 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.30 748dd296-a3e6-4e19-9cfc-2be91094b228 default   }" containerID=5241d9fdf0c34fddcb6eed15546cc911b427e3d2c593b8a13464fc0951488ed1 datapathConfiguration="&{false false false false false <nil>}" interface=lxc8ce81310c9c9 k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5241d9fdf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5241d9fdf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=5241d9fdf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=52210 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=5241d9fdf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=52210 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=5241d9fdf0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=862 identity=52210 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5241d9fdf0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=862 identity=52210 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.48 76548064-fdd2-47a4-9d39-e0965df31146 default   }" containerID=f26f0aaa14bdebea3890a92fa66c5018151641c356f3ca2ae4657dd2422ae38e datapathConfiguration="&{false false false false false <nil>}" interface=lxc5fd45f107b6a k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f26f0aaa14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f26f0aaa14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=f26f0aaa14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=52210 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f26f0aaa14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=52210 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f26f0aaa14 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=789 identity=52210 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f26f0aaa14 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=789 identity=52210 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 subsys=daemon
level=info msg="Delete endpoint request" containerID=e1d9a3828a endpointID=1672 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-jsv45 subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=485d2733-9c0f-46f1-bd4b-c6845810dfcf k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=e1d9a3828a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1672 identity=14933 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-jsv45 subsys=endpoint
level=info msg="Delete endpoint request" containerID=5241d9fdf0 endpointID=862 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Delete endpoint request" containerID=f26f0aaa14 endpointID=789 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=5241d9fdf0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=862 identity=52210 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b68d55c-938a-4f18-a987-b0571fc2b14f subsys=endpoint
level=info msg="Removed endpoint" containerID=f26f0aaa14 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=789 identity=52210 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-227b9428-3c5c-4024-a2b1-9b98e3e921f4 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.57 7c611aae-85e8-484f-9d88-94876da07886 default   }" containerID=2aa98b346b923716a89271fc809b60e36017fb45af2b2c56356bcb10bd24befa datapathConfiguration="&{false false false false false <nil>}" interface=lxc023f10f2742b k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=2aa98b346b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=2aa98b346b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=2aa98b346b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identity=6097 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=2aa98b346b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identity=6097 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=2aa98b346b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=19 identity=6097 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=2aa98b346b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=19 identity=6097 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.186 4db4f001-e58a-446a-a6e2-1ab048772f6b default   }" containerID=d82db276da5a79a9a4487f12c7ff667773f3a6fa4cdad3387f05084649c9c4e9 datapathConfiguration="&{false false false false false <nil>}" interface=lxcdf32d06fa5e1 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d82db276da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d82db276da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d82db276da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=1775 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d82db276da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=1775 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=d82db276da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2903 identity=1775 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d82db276da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2903 identity=1775 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.187 b7ea1048-0f9c-463a-b4de-97b6ee126b6f default   }" containerID=2e443a14b7995b8abaf84be465c80fef84b900b0a7770b34c86dcd3d66825152 datapathConfiguration="&{false false false false false <nil>}" interface=lxcef43026f00c4 k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=2e443a14b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=2e443a14b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=2e443a14b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identity=52210 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=2e443a14b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1199 identity=52210 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=2e443a14b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1199 identity=52210 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=2e443a14b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1199 identity=52210 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb subsys=daemon
level=info msg="Delete endpoint request" containerID=2e443a14b7 endpointID=1199 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=2e443a14b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1199 identity=52210 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c0d716f-5c38-4536-be56-c7328365e1eb subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.9 f0a59404-482a-4c11-b520-bbb012ee2833 default   }" containerID=377ff4dae1a1b03352aff31738eb30614bf11fe8045d1828740ddafa5a24c12e datapathConfiguration="&{false false false false false <nil>}" interface=lxca14dec739a15 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=377ff4dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=377ff4dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=377ff4dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=377ff4dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=28421 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=377ff4dae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=28421 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=377ff4dae1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=560 identity=28421 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=377ff4dae1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=560 identity=28421 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.79 bb67d16a-d7cb-4673-b116-4c0205c4accc default   }" containerID=5e789f30bd9712deaa78e457f97f253680882fa9da07ebbc783aba27a7802bb7 datapathConfiguration="&{false false false false false <nil>}" interface=lxcca52594c4e1b k8sPodName=openstack/keystone-api-6645d76778-wl5t2 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5e789f30bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6645d76778-wl5t2 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5e789f30bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6645d76778-wl5t2 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=5e789f30bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=55077 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6645d76778-wl5t2 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=5e789f30bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=55077 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6645d76778-wl5t2 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=5e789f30bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3347 identity=55077 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6645d76778-wl5t2 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5e789f30bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3347 identity=55077 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-api-6645d76778-wl5t2 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.206 09d81ec6-2d8a-4230-94c3-102b53f772b7 default   }" containerID=d5584e97c11132021b5fe26874005928a30b87929d91d902bb365904862b269f datapathConfiguration="&{false false false false false <nil>}" interface=lxc12680af5859a k8sPodName=openstack/keystone-credential-setup-9grfr labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d5584e97c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-credential-setup-9grfr subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d5584e97c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-credential-setup-9grfr subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d5584e97c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=9104 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-credential-setup-9grfr oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d5584e97c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=9104 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-credential-setup-9grfr subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=d5584e97c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1912 identity=9104 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-credential-setup-9grfr subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d5584e97c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1912 identity=9104 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-credential-setup-9grfr subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=d5584e97c1 endpointID=1912 k8sNamespace=openstack k8sPodName=keystone-credential-setup-9grfr subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=9159dacd-6bc6-4670-b07e-c86ccff0b0a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=d5584e97c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1912 identity=9104 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-credential-setup-9grfr subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.54 07050883-87b6-4d3d-881e-fee0dcf18b45 default   }" containerID=ab0485ae22bfd2f4e46dace40c0f86f6fcb5a1d41320f4e061c608d4f8110c77 datapathConfiguration="&{false false false false false <nil>}" interface=lxcdd22f9ab9272 k8sPodName=openstack/keystone-db-init-s7b4t labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=ab0485ae22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-db-init-s7b4t subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=ab0485ae22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-db-init-s7b4t subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=ab0485ae22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=5883 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-db-init-s7b4t oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=ab0485ae22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=5883 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-db-init-s7b4t subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=ab0485ae22 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=37 identity=5883 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-db-init-s7b4t subsys=endpoint
level=info msg="Successful endpoint creation" containerID=ab0485ae22 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=37 identity=5883 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-db-init-s7b4t subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=ab0485ae22 endpointID=37 k8sNamespace=openstack k8sPodName=keystone-db-init-s7b4t subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d36106ef-a9c2-47f9-a9a6-e09b94978281 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=ab0485ae22 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=37 identity=5883 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-db-init-s7b4t subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.158 b3404776-f1ba-49a9-a4c1-d2bd3f490351 default   }" containerID=cfbe263caee8d8364e24b2e50f7d1da2005abcf3cdd8e4eb5195dbe2c698627b datapathConfiguration="&{false false false false false <nil>}" interface=lxcdba3439b3914 k8sPodName=openstack/keystone-fernet-setup-vf8g9 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=cfbe263cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-vf8g9 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=cfbe263cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-vf8g9 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=cfbe263cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identity=19735 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-vf8g9 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=cfbe263cae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1848 identity=19735 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-vf8g9 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=cfbe263cae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1848 identity=19735 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-vf8g9 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=cfbe263cae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1848 identity=19735 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-vf8g9 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=cfbe263cae endpointID=1848 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vf8g9 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a11e432d-1746-4bd1-977e-4a11250e2c41 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=cfbe263cae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1848 identity=19735 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/keystone-fernet-setup-vf8g9 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.74 99f1140f-f2c1-4afb-94ff-ff9ec5b95cd4 default   }" containerID=a0f0becc276451dc5095f3d725db159a29c89b35eedb901ea21eb5262177767f datapathConfiguration="&{false false false false false <nil>}" interface=lxc2c5ebba7ec39 k8sPodName=openstack/keystone-db-sync-f67wq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a0f0becc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-db-sync-f67wq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a0f0becc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-db-sync-f67wq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a0f0becc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=35565 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-db-sync-f67wq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a0f0becc27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=35565 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-db-sync-f67wq subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=a0f0becc27 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=94 identity=35565 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-db-sync-f67wq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a0f0becc27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=94 identity=35565 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-db-sync-f67wq subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=a0f0becc27 endpointID=94 k8sNamespace=openstack k8sPodName=keystone-db-sync-f67wq subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d7b59cf7-da8b-4e81-9b5e-2d3b575c5eb5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=a0f0becc27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=94 identity=35565 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-db-sync-f67wq subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.193 5732b32d-5f87-43d3-9cbb-a6f1641923b2 default   }" containerID=26972ed9678b3ce78dcf4830447fcc3c716401a2e19d9a1b017fc585074d07bb datapathConfiguration="&{false false false false false <nil>}" interface=lxc8f3857b35c4a k8sPodName=openstack/keystone-rabbit-init-zc2t6 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=26972ed967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-rabbit-init-zc2t6 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=26972ed967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f3b79a8-be32-4486-b327-fd873d963020,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8f3b79a8-be32-4486-b327-fd873d963020,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-rabbit-init-zc2t6 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8f3b79a8-be32-4486-b327-fd873d963020;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8f3b79a8-be32-4486-b327-fd873d963020;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=26972ed967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=7225 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8f3b79a8-be32-4486-b327-fd873d963020,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8f3b79a8-be32-4486-b327-fd873d963020,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-rabbit-init-zc2t6 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=26972ed967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=7225 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-rabbit-init-zc2t6 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=26972ed967 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=640 identity=7225 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-rabbit-init-zc2t6 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=26972ed967 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=640 identity=7225 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-rabbit-init-zc2t6 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=26972ed967 endpointID=640 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-zc2t6 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8f3b79a8-be32-4486-b327-fd873d963020 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8f3b79a8-be32-4486-b327-fd873d963020 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=26972ed967 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=640 identity=7225 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-rabbit-init-zc2t6 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.29 5fb3813c-123e-421f-992e-406e529cbf35 default   }" containerID=f26a74d62b5a0f7998c65bd71e14dd685f5ee27bef2a49050518e0196e52554d datapathConfiguration="&{false false false false false <nil>}" interface=lxc8bd5636df381 k8sPodName=openstack/keystone-domain-manage-vjsjr labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f26a74d62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-vjsjr subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f26a74d62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-vjsjr subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f26a74d62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identity=1209 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-vjsjr oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f26a74d62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1158 identity=1209 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-vjsjr subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f26a74d62b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1158 identity=1209 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-vjsjr subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f26a74d62b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1158 identity=1209 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-vjsjr subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=f26a74d62b endpointID=1158 k8sNamespace=openstack k8sPodName=keystone-domain-manage-vjsjr subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=163ee186-7797-43a5-9901-9473c3bb3c68 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=f26a74d62b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1158 identity=1209 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-vjsjr subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.175 3f0741c8-fa08-49fe-add7-69f63009f593 default   }" containerID=f5c28d0f4c6f0f923b85ecf2facf43e4c27ca1e1ace62ee5e6874c5f6aa2759e datapathConfiguration="&{false false false false false <nil>}" interface=lxceb8667247ff1 k8sPodName=openstack/keystone-bootstrap-l8rtt labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f5c28d0f4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-bootstrap-l8rtt subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f5c28d0f4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=66474827-a727-49c6-8bbc-54988a6be98f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=66474827-a727-49c6-8bbc-54988a6be98f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-bootstrap-l8rtt subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=66474827-a727-49c6-8bbc-54988a6be98f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=66474827-a727-49c6-8bbc-54988a6be98f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f5c28d0f4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=38180 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=66474827-a727-49c6-8bbc-54988a6be98f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=66474827-a727-49c6-8bbc-54988a6be98f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-bootstrap-l8rtt oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f5c28d0f4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=38180 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-bootstrap-l8rtt subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=f5c28d0f4c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1188 identity=38180 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-bootstrap-l8rtt subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f5c28d0f4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1188 identity=38180 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-bootstrap-l8rtt subsys=daemon
level=info msg="Delete endpoint request" containerID=f5c28d0f4c endpointID=1188 k8sNamespace=openstack k8sPodName=keystone-bootstrap-l8rtt subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=66474827-a727-49c6-8bbc-54988a6be98f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=66474827-a727-49c6-8bbc-54988a6be98f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=f5c28d0f4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1188 identity=38180 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-bootstrap-l8rtt subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.39 82287a92-51ea-4355-be2f-b66fb5f43688 default   }" containerID=4b3d1e9fc606688a8372699c1c38897fcb017723438b23a9ee2cf5b69bf6e10a datapathConfiguration="&{false false false false false <nil>}" interface=lxc3161282fd689 k8sPodName=openstack/horizon-6b4d4c4d9-qxpz4 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4b3d1e9fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-qxpz4 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4b3d1e9fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-qxpz4 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=4b3d1e9fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=16958 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-qxpz4 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4b3d1e9fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=16958 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-qxpz4 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=4b3d1e9fc6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=311 identity=16958 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-qxpz4 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4b3d1e9fc6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=311 identity=16958 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-qxpz4 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.201 d4cc5a6b-b01b-44fd-bd11-a1c7046ef82b default   }" containerID=3928ce2ba8252763f2ba45b0cb63e8b1ef70f9a5a4b30b8474ed0afdefca57df datapathConfiguration="&{false false false false false <nil>}" interface=lxcf4a7e7c898a1 k8sPodName=openstack/horizon-6b4d4c4d9-64fpw labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=3928ce2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-64fpw subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=3928ce2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-64fpw subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=3928ce2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=16958 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-64fpw oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=3928ce2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=16958 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-64fpw subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.233 1ed7ef4a-5a76-4a2c-8eb6-d19b96526d0d default   }" containerID=312f371fa8cd9cbc9d14aa1f10f9e42bedcff6fab428dcdfa78495c8f2180bb4 datapathConfiguration="&{false false false false false <nil>}" interface=lxc67098d1b435d k8sPodName=openstack/horizon-6b4d4c4d9-dsvdw labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=312f371fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-dsvdw subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=312f371fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-dsvdw subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=312f371fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=16958 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-dsvdw oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=312f371fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=16958 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-dsvdw subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.76 4f2e3c50-1420-4ee5-a1da-a36d6a4875c7 default   }" containerID=e60dffecc3b7b4a5dc2a66262e05b9040fbb6b32833deca54e889683fee1f043 datapathConfiguration="&{false false false false false <nil>}" interface=lxc108d357711c3 k8sPodName=openstack/horizon-db-init-z5ktw labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e60dffecc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1527 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-init-z5ktw subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e60dffecc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1527 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-init-z5ktw subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e60dffecc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1527 identity=50540 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-init-z5ktw oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e60dffecc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1527 identity=50540 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-init-z5ktw subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=3928ce2ba8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=782 identity=16958 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-64fpw subsys=endpoint
level=info msg="Successful endpoint creation" containerID=3928ce2ba8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=782 identity=16958 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-64fpw subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=312f371fa8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=168 identity=16958 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-dsvdw subsys=endpoint
level=info msg="Successful endpoint creation" containerID=312f371fa8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=168 identity=16958 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/horizon-6b4d4c4d9-dsvdw subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=e60dffecc3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1527 identity=50540 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-init-z5ktw subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e60dffecc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1527 identity=50540 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-init-z5ktw subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=e60dffecc3 endpointID=1527 k8sNamespace=openstack k8sPodName=horizon-db-init-z5ktw subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=672ecdb1-4022-407d-ab49-e34d3fc395d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=e60dffecc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1527 identity=50540 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-init-z5ktw subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.29 a1e4faeb-d064-477b-acb7-3a4024c74b6f default   }" containerID=b0413b8425995428159ef672300985971f540b2ce657c1b28b486ad80e67dfa4 datapathConfiguration="&{false false false false false <nil>}" interface=lxc724f07738ad8 k8sPodName=openstack/horizon-db-sync-r9462 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b0413b8425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/horizon-db-sync-r9462 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b0413b8425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/horizon-db-sync-r9462 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b0413b8425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identity=60566 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/horizon-db-sync-r9462 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b0413b8425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2816 identity=60566 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/horizon-db-sync-r9462 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=b0413b8425 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2816 identity=60566 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/horizon-db-sync-r9462 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b0413b8425 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2816 identity=60566 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/horizon-db-sync-r9462 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=b0413b8425 endpointID=2816 k8sNamespace=openstack k8sPodName=horizon-db-sync-r9462 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=a5f85910-07cf-4088-9292-8c98aaa310c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=b0413b8425 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2816 identity=60566 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/horizon-db-sync-r9462 subsys=endpoint