level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="957.565µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="76.462µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.023955ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.93µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.836868ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="18.08µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="23.731µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="66.962µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.362µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="91.512µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="531.174µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.02µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.614667ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.706809ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="50.931µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="54.151µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="235.616µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.783µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="111.132µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=168.611809ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="274.177µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="11.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.36.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.152355ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.476833ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.34621ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="14.691µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.591µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="38.381µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="24.45µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="74.362µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="345.069µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.88µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="277.827µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="913.292µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.23827ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.9µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="33.931µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.36 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.36 ipAddr.ipv6="" k8sNodeIP=162.253.55.36 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.36" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.28" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.36" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.36} {CiliumInternalIP 10.0.0.28}] 10.0.0.0/24 [] [] 10.0.0.47 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36315" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.531003051s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="20.851µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.02µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="35.501µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.51µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=850 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.631278412s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=304.494235ms file-path=/var/run/cilium/state/templates/29d77772c52fd212b2b456f31b6f03379b3e0969a09f2db8a948859185818276/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=850 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2672 ipv4=10.0.0.47 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2672 identityLabels="reserved:health" ipv4=10.0.0.47 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2672 identity=4 identityLabels="reserved:health" ipv4=10.0.0.47 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 abfd363c-fee1-478d-8f08-e06e95cf7296 default }" containerID=10b5130ba8136f4ef82cca99d124345ea6e11fa8288de8db54784622943adab1 datapathConfiguration="&{false false false false false }" interface=lxc070bafbb1f7b k8sPodName=kube-system/coredns-7c96b6546b-zxhjb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10b5130ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zxhjb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10b5130ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zxhjb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10b5130ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identity=53119 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zxhjb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=10b5130ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2762 identity=53119 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zxhjb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 937966f2-8720-4b9a-9af7-cf0c1f6efbae default }" containerID=752b83013c110f0bf165e196e73da2d34d64563c6e250c016fc1e0c708d268b4 datapathConfiguration="&{false false false false false }" interface=lxc9f02abf82b46 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=752b83013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 ipv4=10.0.0.169 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=752b83013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9d2858ab-3a45-4563-8238-6d2870286556,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9d2858ab-3a45-4563-8238-6d2870286556,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.169 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=9d2858ab-3a45-4563-8238-6d2870286556;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=9d2858ab-3a45-4563-8238-6d2870286556;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=752b83013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=54126 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9d2858ab-3a45-4563-8238-6d2870286556,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9d2858ab-3a45-4563-8238-6d2870286556,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.169 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=752b83013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1874 identity=54126 ipv4=10.0.0.169 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.067177427s file-path=/var/run/cilium/state/templates/abc9ee7905d3f66053021e30a7bd4e8b7de96f4da52c8fb7092019c4c754227c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2672 identity=4 ipv4=10.0.0.47 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=752b83013c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1874 identity=54126 ipv4=10.0.0.169 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=752b83013c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1874 identity=54126 ipv4=10.0.0.169 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=10b5130ba8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2762 identity=53119 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zxhjb subsys=endpoint level=info msg="Successful endpoint creation" containerID=10b5130ba8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2762 identity=53119 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zxhjb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=752b83013c endpointID=1874 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-xrw7z subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=9d2858ab-3a45-4563-8238-6d2870286556 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=9d2858ab-3a45-4563-8238-6d2870286556 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=752b83013c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1874 identity=54126 ipv4=10.0.0.169 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 0496a881-5f95-4873-b11d-caaa2be0ff77 default }" containerID=917593fca1952b4d5977e55aa12d9ecbc6776fcb4feda652306a8a9175f7a782 datapathConfiguration="&{false false false false false }" interface=lxc836e88101c8e k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=917593fca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 ipv4=10.0.0.90 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=917593fca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.90 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=917593fca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=917593fca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=18070 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.90 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=917593fca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=18070 ipv4=10.0.0.90 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=917593fca1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1996 identity=18070 ipv4=10.0.0.90 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=917593fca1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1996 identity=18070 ipv4=10.0.0.90 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7spr8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=850 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00850 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00850 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00850 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00850:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=850 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 f8f2e57b-e15f-465f-8ea4-464505d32c17 default }" containerID=78e4b027ab85a2e04e7df5f7c829ee0a7e5c0545c720712c1281d94129476c6b datapathConfiguration="&{false false false false false }" interface=lxcb7e42c10b42a k8sPodName=kube-system/coredns-67659f764b-dtwxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78e4b027ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 ipv4=10.0.0.40 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtwxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78e4b027ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.40 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtwxf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=78e4b027ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=53119 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.40 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtwxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78e4b027ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=53119 ipv4=10.0.0.40 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtwxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78e4b027ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=130 identity=53119 ipv4=10.0.0.40 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtwxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=78e4b027ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=130 identity=53119 ipv4=10.0.0.40 ipv6= k8sPodName=kube-system/coredns-67659f764b-dtwxf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.129 69e836bc-83c3-4499-9d45-cccf79f44a4f default }" containerID=aa17b321a20333a007bbb15a15573cad82c052fd60f47e8433026f60f69f7769 datapathConfiguration="&{false false false false false }" interface=lxced3f04eac2c3 k8sPodName=kube-system/coredns-67659f764b-8hn4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa17b321a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8hn4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa17b321a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8hn4j subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aa17b321a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=53119 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8hn4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa17b321a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=843 identity=53119 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8hn4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa17b321a2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=843 identity=53119 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8hn4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa17b321a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=843 identity=53119 ipv4=10.0.0.129 ipv6= k8sPodName=kube-system/coredns-67659f764b-8hn4j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 78a80479-f0b9-419c-b625-ddfd57eebd77 default }" containerID=86cac44908b5338e72226e6bceab8e936fd6a49d62ab3ea31c598fbcc8dac661 datapathConfiguration="&{false false false false false }" interface=lxcb9fcff024767 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nhhg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86cac44908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nhhg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86cac44908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nhhg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86cac44908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=54773 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nhhg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86cac44908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=54773 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nhhg5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=86cac44908 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1458 identity=54773 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nhhg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86cac44908 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1458 identity=54773 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nhhg5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10b5130ba8 endpointID=2762 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-zxhjb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=10b5130ba8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2762 identity=53119 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zxhjb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 4587290c-0d5f-497b-931e-6ef527f8d5ad default }" containerID=f11948afeae519e0da990699329fbd6d8e787d34f04d64ed96e220791288a806 datapathConfiguration="&{false false false false false }" interface=lxc3a4a6fe6b11d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4d65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f11948afea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4d65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f11948afea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4d65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f11948afea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=41475 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4d65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f11948afea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=41475 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4d65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 803329d2-c735-4750-984c-7e777ff411ba default }" containerID=f10e9ed326c36a3ee237c88605cdded08adea07fbd00fe580a0e7e13a1418378 datapathConfiguration="&{false false false false false }" interface=lxc2e369b346edc k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8kqfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f10e9ed326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8kqfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f10e9ed326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8kqfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f10e9ed326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 identity=38192 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8kqfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f10e9ed326 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 identity=38192 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8kqfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 eecfcf00-3ae1-48fe-8a7a-083462192876 default }" containerID=28c488916e41072b5ea1d19afcbf0e78f9658af308466c858fb02f69a12aef4d datapathConfiguration="&{false false false false false }" interface=lxce245a81230ab k8sPodName=cert-manager/cert-manager-75c4c745bc-btb75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28c488916e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-btb75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28c488916e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-btb75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28c488916e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=32400 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-btb75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28c488916e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=32400 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-btb75 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f11948afea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=915 identity=41475 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4d65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f11948afea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=915 identity=41475 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-l4d65 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f10e9ed326 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2179 identity=38192 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8kqfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f10e9ed326 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2179 identity=38192 ipv4=10.0.0.27 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8kqfc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=28c488916e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1322 identity=32400 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-btb75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28c488916e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1322 identity=32400 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-btb75 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 23f507f8-b469-4ece-9482-8e3b1587202b default }" containerID=3d27c86302cdd2a71b649bf07675b4303d3700866526abc31ea9fe54d1c06938 datapathConfiguration="&{false false false false false }" interface=lxc8a572040a629 k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d27c86302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d27c86302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d27c86302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=474 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d27c86302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=474 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d27c86302 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=242 identity=474 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d27c86302 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=242 identity=474 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d27c86302 endpointID=242 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-2kvbt subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c64cd968-4e64-4ccc-b58a-9c4d3e326700 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=3d27c86302 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=242 identity=474 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2kvbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 416d109f-aaba-4f7a-8c95-b1c4efd1c397 default }" containerID=3df24381ca50f3875ef7c01a0eee4e8e60167bef9764950c5c62e0304f3ab87b datapathConfiguration="&{false false false false false }" interface=lxc3b915f273921 k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3df24381ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3df24381ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3df24381ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 identity=11578 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3df24381ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 identity=11578 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3df24381ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3802 identity=11578 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3df24381ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3802 identity=11578 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3df24381ca endpointID=3802 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-827s5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=731841b0-63e5-40d5-a327-4acbc0b2e4f9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=3df24381ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3802 identity=11578 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-827s5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 cbcea09e-5a2a-46a0-86f7-bfe4f2443e78 default }" containerID=9a28fc86b32a94cebd57517abd67240e4eb07a3014ac9eac7ae37c6fad288f1a datapathConfiguration="&{false false false false false }" interface=lxc60f8375e6c65 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a28fc86b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a28fc86b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9a28fc86b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a28fc86b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=5669 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a28fc86b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=5669 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a28fc86b3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3050 identity=5669 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a28fc86b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3050 identity=5669 ipv4=10.0.0.68 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ks4cj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 9c18fd1a-4e0e-4ab7-baac-5bcf4284dd08 default }" containerID=66f251d32a8f54c7a2359094f57ccd001574af90832b81bb6052f0cd4dff4f1e datapathConfiguration="&{false false false false false }" interface=lxcd43d611edbec k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66f251d32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66f251d32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66f251d32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=13420 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66f251d32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=13420 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66f251d32a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3235 identity=13420 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=66f251d32a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3235 identity=13420 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66f251d32a endpointID=3235 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-qd5cv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=94315073-65b9-4ba4-96f4-d51bdc39ed9a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=66f251d32a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3235 identity=13420 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qd5cv subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f88281fb-3610-4077-8991-236239c7b03d] Description:}]" policyAddRequest=5d989add-5cb4-419d-9d07-1d6f46917997 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5d989add-5cb4-419d-9d07-1d6f46917997 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=33691a95-36ac-41f1-b039-75e2f51740c0] Description:}]" policyAddRequest=41e1e2e6-9a69-4351-beba-8d8ac6e8a704 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=41e1e2e6-9a69-4351-beba-8d8ac6e8a704 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.11 00086793-4311-4495-a5a5-d25ebf9d9de7 default }" containerID=b10cfa0674413e21b96d45d571ef7c568b68c505f6254d9ee58e082989f15d0f datapathConfiguration="&{false false false false false }" interface=lxc2e0751022705 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9vq4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b10cfa0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3200 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9vq4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b10cfa0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3200 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9vq4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b10cfa0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3200 identity=25781 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9vq4v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b10cfa0674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3200 identity=25781 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9vq4v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b10cfa0674 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3200 identity=25781 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9vq4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b10cfa0674 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3200 identity=25781 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9vq4v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 3498bad2-5ba9-43c8-8b52-b6bd8e131518 default }" containerID=ff9495bb07bc2b297fb8ef68c32cc531f570ae99d1e263e6b58cac4a681ddb73 datapathConfiguration="&{false false false false false }" interface=lxcbe07e091aba9 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-5rnkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff9495bb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-5rnkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff9495bb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-5rnkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff9495bb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=23599 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-5rnkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff9495bb07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=23599 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-5rnkn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff9495bb07 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=508 identity=23599 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-5rnkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff9495bb07 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=508 identity=23599 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-5rnkn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 c524946c-b07d-44d3-8fc3-ed693dca1711 default }" containerID=89841854a2623f16d98ca5116e82adbd2f1cad4092a32dc9ddc5513523f51f42 datapathConfiguration="&{false false false false false }" interface=lxcd794d4650a42 k8sPodName=openstack/pxc-operator-69cb5bbdb9-gjblq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89841854a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gjblq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89841854a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gjblq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89841854a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=20573 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gjblq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89841854a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=20573 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gjblq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=89841854a2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=235 identity=20573 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gjblq subsys=endpoint level=info msg="Successful endpoint creation" containerID=89841854a2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=235 identity=20573 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-gjblq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 57f4c56d-f126-44b2-9405-f6a44986f3cb default }" containerID=31faa874390012c2e7280036df8cde2d0980896a4c8ce9bf7d13d344daf40ca5 datapathConfiguration="&{false false false false false }" interface=lxcdd2c21f89acf k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31faa87439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31faa87439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31faa87439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=11285 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31faa87439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=11285 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 836a839d-886b-4dd2-be93-3bbc1eb11d72 default }" containerID=cf060597b85b3a0a668df8f04c3ffaf552a9e7cfc0cc344b1d4bdf1df9b9ae31 datapathConfiguration="&{false false false false false }" interface=lxc2060bf1b791d k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf060597b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf060597b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf060597b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf060597b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=50212 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31faa87439 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1818 identity=11285 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31faa87439 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1818 identity=11285 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cf060597b8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=193 identity=50212 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf060597b8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=193 identity=50212 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf060597b8 endpointID=193 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cf060597b8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=193 identity=50212 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-090abf71-3766-4374-96eb-7f85670156f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 0e62fe1e-2442-43e9-98b6-16de83f44a07 default }" containerID=7f50965444ef057118e035c4580266d47bec0128c9f32589c26055d27cbc8edb datapathConfiguration="&{false false false false false }" interface=lxc3fd59b1684e7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f50965444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f50965444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7f50965444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7f50965444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 identity=33332 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f50965444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3707 identity=33332 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f50965444 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3707 identity=33332 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f50965444 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3707 identity=33332 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=33b53935-0cbb-4c83-9670-0b6b26e8bdb6] Description:}]" policyAddRequest=0456118f-710b-4a57-92ac-ca433156f543 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0456118f-710b-4a57-92ac-ca433156f543 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.91 30845420-68cb-4824-a0f0-91b998c84126 default }" containerID=0ff6dacb39fcde751e84eb741ca8b45910faca8e8ef7cc0b25bbb122a668123a datapathConfiguration="&{false false false false false }" interface=lxc56cc8b770d31 k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ff6dacb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ff6dacb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ff6dacb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ff6dacb39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3953 identity=50212 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ff6dacb39 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3953 identity=50212 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ff6dacb39 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3953 identity=50212 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a subsys=daemon level=info msg="Delete endpoint request" containerID=0ff6dacb39 endpointID=3953 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0ff6dacb39 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3953 identity=50212 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2333091a-26c5-4865-8a97-a3e36f03d36a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 cb4ce0ab-f1fb-4a68-9750-84a183d8525c default }" containerID=86f8765f04ac6c374a216903fa4772f26bef89077eeaae98e8b53721266ff800 datapathConfiguration="&{false false false false false }" interface=lxc8e748f6e8cc2 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86f8765f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86f8765f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=86f8765f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=86f8765f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=32648 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86f8765f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=32648 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86f8765f04 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1113 identity=32648 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86f8765f04 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1113 identity=32648 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=13d1d32e-45b9-4aee-bb91-79c33c6b7003] Description:}]" policyAddRequest=fac94e2f-32fc-48d9-bb8f-44f46e7d875f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fac94e2f-32fc-48d9-bb8f-44f46e7d875f policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.223 723a094e-f7cd-4c75-95c9-f2870a8fed74 default }" containerID=d9c25cd9a1fa469fce9f8851c5bc421683f3e99608e1dbbc3cb8b7480cd55388 datapathConfiguration="&{false false false false false }" interface=lxc066d97f2b630 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9c25cd9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 ipv4=10.0.0.223 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9c25cd9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.223 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9c25cd9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 identity=51817 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.223 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9c25cd9a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3595 identity=51817 ipv4=10.0.0.223 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9c25cd9a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3595 identity=51817 ipv4=10.0.0.223 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9c25cd9a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3595 identity=51817 ipv4=10.0.0.223 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008643661990882899 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.130 0b8437a3-3cc0-4124-956d-98eb834f2199 default }" containerID=3193db4cceafee072fe1bca48453caee16e1d5b558cde817581956b4d7edd42a datapathConfiguration="&{false false false false false }" interface=lxcd486c83eb1c6 k8sPodName=monitoring/node-feature-discovery-worker-cn5vb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3193db4cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cn5vb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3193db4cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cn5vb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3193db4cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cn5vb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3193db4cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=35816 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cn5vb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3193db4cce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=35816 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cn5vb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3193db4cce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=86 identity=35816 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cn5vb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3193db4cce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=35816 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cn5vb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 effdea68-08f3-443f-99ee-6d3cd28c4782 default }" containerID=de301fc629e302223da5933ec6f665db556eeacf3f7424a4d72b0522df559af1 datapathConfiguration="&{false false false false false }" interface=lxc15c769b67fef k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7vh9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de301fc629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7vh9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de301fc629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7vh9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.29 f2179605-af9c-41c5-a5aa-a55b95a465f5 default }" containerID=823e676c3aa5fdcc3d29be8b15279928c25fc9b6d1e3d68229c98129349f107a datapathConfiguration="&{false false false false false }" interface=lxcc87e99ea3a69 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnrvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=823e676c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3311 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnrvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=823e676c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3311 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnrvt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de301fc629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=5889 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7vh9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de301fc629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=5889 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7vh9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=823e676c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3311 identity=9855 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnrvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=823e676c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3311 identity=9855 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnrvt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de301fc629 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1174 identity=5889 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7vh9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=de301fc629 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1174 identity=5889 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7vh9l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=823e676c3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3311 identity=9855 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnrvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=823e676c3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3311 identity=9855 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnrvt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 cb1294a2-27cf-420f-b2cd-5ef17b153c63 default }" containerID=022175dfc9d52852a5bf4bbc41c4bf1526f4764b5e594bf608d2d77f942f2fb4 datapathConfiguration="&{false false false false false }" interface=lxca7e35ad03b87 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mv9r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=022175dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 ipv4=10.0.0.18 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mv9r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=022175dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.18 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mv9r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=022175dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=29736 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.18 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mv9r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=022175dfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=29736 ipv4=10.0.0.18 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mv9r9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=022175dfc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2237 identity=29736 ipv4=10.0.0.18 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mv9r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=022175dfc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2237 identity=29736 ipv4=10.0.0.18 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mv9r9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=850 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00850 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00850 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00850 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00850:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=850 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 0e0f45dd-0fb7-444c-9763-6829c0a542a6 default }" containerID=8e80bf859420e5fa5d367b1d5579c3e31bd00e382ce96ad923bf3945f6f51104 datapathConfiguration="&{false false false false false }" interface=lxc890829547f94 k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e80bf8594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e80bf8594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e80bf8594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=27937 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e80bf8594 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=27937 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8e80bf8594 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1398 identity=27937 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e80bf8594 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=27937 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e80bf8594 endpointID=1398 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-n44m6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=bf900222-554a-4ac4-9b1b-1af46be62f4d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8e80bf8594 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=27937 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-n44m6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 a8903dd2-2208-4569-bd3e-02197a707cfb default }" containerID=26cb56de00fb5d1700f17dd75b741fe38f0d4d2b6fb97be7a1a65f669e3a582f datapathConfiguration="&{false false false false false }" interface=lxc5f92098c9614 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26cb56de00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26cb56de00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26cb56de00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26cb56de00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=37413 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26cb56de00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=37413 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 8da694fc-df16-4b61-9b44-6cc95298a122 default }" containerID=b8c9c5524e018752f442219207bf79d99dea9e4d20e2eba635b4f5e5453d69b4 datapathConfiguration="&{false false false false false }" interface=lxc844cb38682ea k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hc58x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8c9c5524e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hc58x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8c9c5524e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hc58x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8c9c5524e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=17220 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hc58x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8c9c5524e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=17220 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hc58x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 4721492b-9694-4af9-aaad-0d183d85930b default }" containerID=6fd5807e7f46e10eada71e277c9ee7395bff28755fcd3f4ccb10f335e6c9ea9c datapathConfiguration="&{false false false false false }" interface=lxc8c4ea0a62e8e k8sPodName=monitoring/kube-prometheus-stack-grafana-6b5969b9db-c2mg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fd5807e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b5969b9db-c2mg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fd5807e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b5969b9db-c2mg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fd5807e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=56883 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b5969b9db-c2mg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fd5807e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=56883 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b5969b9db-c2mg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26cb56de00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=558 identity=37413 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=26cb56de00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=558 identity=37413 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-48mqb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8c9c5524e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=17220 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hc58x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8c9c5524e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=17220 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-hc58x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6fd5807e7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1110 identity=56883 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b5969b9db-c2mg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fd5807e7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1110 identity=56883 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b5969b9db-c2mg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 c732f91f-87d6-4806-9cec-dca39359b68b default }" containerID=fb9b2753615e8f42b24f728423c2b1ad1b1aa5c2c43b852da7b6ee625c51bf97 datapathConfiguration="&{false false false false false }" interface=lxcd3f6e134635f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb9b275361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb9b275361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb9b275361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=13823 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb9b275361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=13823 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb9b275361 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1452 identity=13823 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb9b275361 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1452 identity=13823 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb9b275361 endpointID=1452 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-llq4s subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=05527377-e0fa-4431-afb6-35ec61e309f3 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fb9b275361 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1452 identity=13823 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-llq4s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 3962d540-0232-4c20-82df-8231ccf1d143 default }" containerID=adf45cca25ba81d63c9bcf5b81d9411544963c0ff0f1c58e97d2414fc657b731 datapathConfiguration="&{false false false false false }" interface=lxcdfb19fc87355 k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adf45cca25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adf45cca25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adf45cca25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adf45cca25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=50212 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adf45cca25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1533 identity=50212 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed subsys=endpoint level=info msg="Successful endpoint creation" containerID=adf45cca25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1533 identity=50212 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 b358d91e-9ab2-40b3-b8b7-dbf738c463d7 default }" containerID=b2f7f4dd68e3f3521ece04727d441b6cdd84331975e3c9c6f7af4a4f0e8c0145 datapathConfiguration="&{false false false false false }" interface=lxce0c40ed805de k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2f7f4dd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2f7f4dd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b2f7f4dd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2f7f4dd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2678 identity=50212 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2f7f4dd68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2678 identity=50212 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2f7f4dd68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2678 identity=50212 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 subsys=daemon level=info msg="Delete endpoint request" containerID=b2f7f4dd68 endpointID=2678 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=adf45cca25 endpointID=1533 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b2f7f4dd68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2678 identity=50212 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0faa797e-30fc-42b8-9796-ecae108d85b3 subsys=endpoint level=info msg="Removed endpoint" containerID=adf45cca25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1533 identity=50212 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88b5a3a8-9c38-459a-bfca-d554b62877ed subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 2939824f-ebb7-4591-a0e3-1ada1d522e83 default }" containerID=050b0020f126c2d1d7aeb0fd18080c230d5ae0fc93cc39333c8a452d39864c79 datapathConfiguration="&{false false false false false }" interface=lxce9a6f2c3ea72 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=050b0020f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=050b0020f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=050b0020f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=872 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=050b0020f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=872 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=050b0020f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=697 identity=872 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=050b0020f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=697 identity=872 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 772672be-99ff-468d-9fc7-38d9194e3a28 default }" containerID=26703e538bd075db8d902074f6ec3e52d3f5b7a48b016612d876a4fa2bc9284c datapathConfiguration="&{false false false false false }" interface=lxc3c11fcc3f15b k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26703e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 0d22132c-c785-4963-8c15-77696a00febf default }" containerID=c5f334a417f738973ce8f3e9c14239e24724a36b71ac9aa60271846dd1cfcd00 datapathConfiguration="&{false false false false false }" interface=lxcf5e8b2ac69d1 k8sPodName=monitoring/loki-gateway-cf54cb88c-bkl9x labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=26703e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=c5f334a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bkl9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c5f334a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bkl9x subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26703e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=59167 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26703e538b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=59167 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5f334a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identity=19592 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bkl9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5f334a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2943 identity=19592 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bkl9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 db09e8b1-3dde-46f6-a558-1297cca89b78 default }" containerID=88ced49c1c259466dc8a16676ee6d5f30689daeee4cbfe832c5b1050db1b0629 datapathConfiguration="&{false false false false false }" interface=lxc0426029867bf k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88ced49c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88ced49c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88ced49c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=17084 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88ced49c1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=884 identity=17084 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26703e538b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2051 identity=59167 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26703e538b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2051 identity=59167 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c5f334a417 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2943 identity=19592 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bkl9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5f334a417 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2943 identity=19592 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-bkl9x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 6a27f612-89f7-4358-84d8-dceb1c086086 default }" containerID=ac0f46629e6a01522648e2e2e3486a5e3491939e0cb0513d469a7a15577b7566 datapathConfiguration="&{false false false false false }" interface=lxc085f2ff11cbf k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac0f46629e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac0f46629e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac0f46629e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=58001 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac0f46629e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=58001 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=88ced49c1c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=884 identity=17084 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88ced49c1c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=884 identity=17084 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac0f46629e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=694 identity=58001 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac0f46629e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=694 identity=58001 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.161 af91ef07-a933-43f3-948a-4c787980be67 default }" containerID=12d937cb4d8e32d3e38d88d58a1b92ad6e7b1cc69b4a731a6ce723dd8bfa4fe3 datapathConfiguration="&{false false false false false }" interface=lxc091567b1f402 k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12d937cb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12d937cb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12d937cb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12d937cb4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=50212 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12d937cb4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=226 identity=50212 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a subsys=endpoint level=info msg="Successful endpoint creation" containerID=12d937cb4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=50212 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 846c0a63-9ea6-4a0a-8fd6-8ac0620ce280 default }" containerID=c25c1e971e47bf05a73172bfcd43ac3d33e77ea8f0272e1b798695bc059b4381 datapathConfiguration="&{false false false false false }" interface=lxc2af93c2a29c8 k8sPodName=monitoring/vector-bzwk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c25c1e971e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-bzwk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c25c1e971e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-bzwk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c25c1e971e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=13436 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-bzwk6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c25c1e971e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1330 identity=13436 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-bzwk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c25c1e971e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1330 identity=13436 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-bzwk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c25c1e971e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1330 identity=13436 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/vector-bzwk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12d937cb4d endpointID=226 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=12d937cb4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=50212 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-290dbf08-5d06-4870-b4d5-0affa31bfc6a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 a9bb2df8-af34-4955-ba6a-990887b3910c default }" containerID=c9a319ebaeca41ab186b74d7fc4fb2235aeff4b6846593f113bfbef3dbebfbea datapathConfiguration="&{false false false false false }" interface=lxc0c78a5f63fee k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9a319ebae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9a319ebae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9a319ebae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9a319ebae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=53190 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9a319ebae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=53190 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9a319ebae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=257 identity=53190 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9a319ebae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=257 identity=53190 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 1b2718a2-969b-4915-ab0a-e0ce603b97df default }" containerID=72a1d20c6a68db098ba0ee508386b33c89dc034799df6eb58989405851ab92b3 datapathConfiguration="&{false false false false false }" interface=lxc981d63709a74 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8nz95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72a1d20c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8nz95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72a1d20c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8nz95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72a1d20c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 identity=31024 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8nz95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72a1d20c6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2674 identity=31024 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8nz95 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72a1d20c6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2674 identity=31024 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8nz95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72a1d20c6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2674 identity=31024 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8nz95 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 2feda86e-aea8-4d66-9b29-2d72f9e176e3 default }" containerID=6fc12c5b51fc1babc7196de31277ddc2514d9141e085744a3db86e43100bdc12 datapathConfiguration="&{false false false false false }" interface=lxc7d6332660786 k8sPodName=openstack/memcached-memcached-6479589586-5t64c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fc12c5b51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5t64c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fc12c5b51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5t64c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fc12c5b51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=9990 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5t64c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fc12c5b51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=9990 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5t64c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6fc12c5b51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=213 identity=9990 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5t64c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fc12c5b51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=213 identity=9990 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5t64c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 d78036ea-d6bd-436b-b20e-7cf95a98fd0e default }" containerID=6925f698797e33dbfe949d3640035ea90b1699f194d6538de3f0c31a9c5d07eb datapathConfiguration="&{false false false false false }" interface=lxc8735c6225cf2 k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6925f69879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6925f69879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6925f69879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6925f69879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=50212 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6925f69879 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3118 identity=50212 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6925f69879 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3118 identity=50212 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 subsys=daemon level=info msg="Delete endpoint request" containerID=6925f69879 endpointID=3118 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6925f69879 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3118 identity=50212 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12196bd0-6835-46cd-86eb-efaba36ffc41 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 49d6bdfd-40f1-4cbc-98bf-35eafa690596 default }" containerID=8f31724739db60a1db0ce0b240d2ebce68f3223c679174be9ec1557d51b9681c datapathConfiguration="&{false false false false false }" interface=lxca2eb960b0ce1 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f31724739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f31724739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8f31724739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f31724739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=10084 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f31724739 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=10084 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f31724739 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1078 identity=10084 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f31724739 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=10084 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 d085557c-5c24-4431-b3ed-82dba2b88b73 default }" containerID=71a7224617b570ca7684458a41abb1ab52bd749434488e24736e7f0671afedd5 datapathConfiguration="&{false false false false false }" interface=lxc8dfb9361508f k8sPodName=openstack/keystone-api-8577fbfb45-6skzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71a7224617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-api-8577fbfb45-6skzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71a7224617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-api-8577fbfb45-6skzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=71a7224617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-api-8577fbfb45-6skzg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71a7224617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=56956 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-api-8577fbfb45-6skzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71a7224617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1181 identity=56956 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-api-8577fbfb45-6skzg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 90da83af-b4fb-4a64-ad57-65a2b06c3432 default }" containerID=0fbcf15a67db45764c2a60c1749a2f8f958f8f40e1fe857565796f819c2773fa datapathConfiguration="&{false false false false false }" interface=lxcf2a782834498 k8sPodName=openstack/keystone-credential-setup-gt9kd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fbcf15a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-credential-setup-gt9kd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fbcf15a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-credential-setup-gt9kd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fbcf15a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identity=48101 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-credential-setup-gt9kd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fbcf15a67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2820 identity=48101 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-credential-setup-gt9kd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71a7224617 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1181 identity=56956 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-api-8577fbfb45-6skzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=71a7224617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1181 identity=56956 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-api-8577fbfb45-6skzg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0fbcf15a67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2820 identity=48101 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-credential-setup-gt9kd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fbcf15a67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2820 identity=48101 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-credential-setup-gt9kd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0fbcf15a67 endpointID=2820 k8sNamespace=openstack k8sPodName=keystone-credential-setup-gt9kd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=dec4e879-8ef0-4c5b-8c83-d01c199dc4d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0fbcf15a67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2820 identity=48101 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-credential-setup-gt9kd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 7a4b0a8f-020d-4419-a7f0-de489266a93b default }" containerID=966c4aa4b8af6f53976991250ca878d10aaabc479649d258a9fdb581c5797404 datapathConfiguration="&{false false false false false }" interface=lxcaf9e116c6a60 k8sPodName=openstack/keystone-db-init-lljnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=966c4aa4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-db-init-lljnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=966c4aa4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-db-init-lljnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=966c4aa4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=20217 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-db-init-lljnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=966c4aa4b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=20217 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-db-init-lljnf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=966c4aa4b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2349 identity=20217 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-db-init-lljnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=966c4aa4b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=20217 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-db-init-lljnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=966c4aa4b8 endpointID=2349 k8sNamespace=openstack k8sPodName=keystone-db-init-lljnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=27b1a23c-6e86-4e80-a425-2fc41f35c008 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=966c4aa4b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=20217 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-db-init-lljnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 8ef0e77d-5ce1-4cf5-b19a-2233ce0a85b4 default }" containerID=bfd27999171154574c8cc8c86691b56782b777fccf2865e6536262e9855df792 datapathConfiguration="&{false false false false false }" interface=lxcefe39a686a3a k8sPodName=openstack/keystone-fernet-setup-sc59n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfd2799917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-fernet-setup-sc59n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfd2799917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-fernet-setup-sc59n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bfd2799917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=55359 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-fernet-setup-sc59n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfd2799917 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=55359 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-fernet-setup-sc59n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfd2799917 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=841 identity=55359 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-fernet-setup-sc59n subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfd2799917 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=55359 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-fernet-setup-sc59n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfd2799917 endpointID=841 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-sc59n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8ffa3226-bd6d-44cf-85b8-f0ef6dce49d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bfd2799917 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=55359 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-fernet-setup-sc59n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 37626408-340e-4f94-ba37-382118b7fbfd default }" containerID=b0da237e939e054bf0cd0f7fb0b4b2b3cc55fad532341d5b077a9991b896bce4 datapathConfiguration="&{false false false false false }" interface=lxc6296e3298d7c k8sPodName=openstack/keystone-db-sync-5vngn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0da237e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0da237e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b0da237e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0da237e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=2593 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0da237e93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2235 identity=2593 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0da237e93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2235 identity=2593 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0da237e93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2235 identity=2593 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0da237e93 endpointID=2235 k8sNamespace=openstack k8sPodName=keystone-db-sync-5vngn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d70b7283-a651-4836-95ef-f5a3c639c499 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b0da237e93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2235 identity=2593 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-5vngn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 2db1ee77-9f62-4656-803c-253b0821bb6c default }" containerID=dbbabe54303273de1b95d84f9ae61ad7b06c0ea4d4e67106409eede6757c23e6 datapathConfiguration="&{false false false false false }" interface=lxc255fe7f8c04f k8sPodName=openstack/keystone-rabbit-init-5kwls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbbabe5430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-5kwls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbbabe5430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-5kwls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbbabe5430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identity=25776 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-5kwls oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dbbabe5430 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identity=25776 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-5kwls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbbabe5430 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1309 identity=25776 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-5kwls subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbbabe5430 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1309 identity=25776 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-5kwls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbbabe5430 endpointID=1309 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-5kwls subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ef19950e-7725-4ae9-bf56-f76ea26bda51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dbbabe5430 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1309 identity=25776 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-5kwls subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 77bb3e31-d4a3-456e-ba3d-0ffa31084ddb default }" containerID=e5abbc8ef51346e211a38ad111f5e05fea138b9fe43c53881da377969e5f75f6 datapathConfiguration="&{false false false false false }" interface=lxc20dccb8160ad k8sPodName=openstack/keystone-domain-manage-8mmf5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5abbc8ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-8mmf5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5abbc8ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-8mmf5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5abbc8ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=39038 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-8mmf5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5abbc8ef5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=39038 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-8mmf5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5abbc8ef5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3596 identity=39038 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-8mmf5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5abbc8ef5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3596 identity=39038 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-8mmf5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5abbc8ef5 endpointID=3596 k8sNamespace=openstack k8sPodName=keystone-domain-manage-8mmf5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d6aa6cdc-d4c9-417c-bb6b-135410d11580 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e5abbc8ef5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3596 identity=39038 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/keystone-domain-manage-8mmf5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 0e1d4608-7f0a-409c-81f3-b840e8500283 default }" containerID=2eabb7fdc0d0404b309ad9a5a3120ecdd99500557682fda99fe27525d78a5bb8 datapathConfiguration="&{false false false false false }" interface=lxc3d2483378ace k8sPodName=openstack/keystone-bootstrap-g88hg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2eabb7fdc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-g88hg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2eabb7fdc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-g88hg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2eabb7fdc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=56089 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-g88hg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2eabb7fdc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=56089 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-g88hg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2eabb7fdc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1053 identity=56089 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-g88hg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2eabb7fdc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1053 identity=56089 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-g88hg subsys=daemon level=info msg="Delete endpoint request" containerID=2eabb7fdc0 endpointID=1053 k8sNamespace=openstack k8sPodName=keystone-bootstrap-g88hg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=6ecafe56-70f5-4a8c-9cc4-0d7c093abf53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2eabb7fdc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1053 identity=56089 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-g88hg subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03394226737186684 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.25 52b7f2cf-5f58-47e1-8753-c982af9c1dfc default }" containerID=204308b78e3f77d7ab30c7e268de3016094ebf2177208bd937cc3e9d16217d36 datapathConfiguration="&{false false false false false }" interface=lxc0b84fb6a30b3 k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=204308b78e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=204308b78e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=204308b78e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=204308b78e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=50212 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=204308b78e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=879 identity=50212 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 subsys=endpoint level=info msg="Successful endpoint creation" containerID=204308b78e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=879 identity=50212 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 subsys=daemon level=info msg="Delete endpoint request" containerID=204308b78e endpointID=879 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=204308b78e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=879 identity=50212 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f3b46817-544f-47c4-bb14-13698151f159 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 97ffa5ae-f33d-4110-932a-06d98b1bcc3a default }" containerID=c27ac41d01d4c2554b86ae1ec149b2a7fabc7f78e3af1fd327ea88595fc2902f datapathConfiguration="&{false false false false false }" interface=lxc404b3eb9fa82 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c27ac41d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c27ac41d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c27ac41d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c27ac41d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=8468 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c27ac41d01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=8468 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c27ac41d01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=425 identity=8468 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c27ac41d01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=8468 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 6aa0b1c1-5f39-49d5-bb1b-f495846b44de default }" containerID=093d90c4a3b8cff6b6144063acf97a0c5bc481f49d1fa8ba2163589097c43dc9 datapathConfiguration="&{false false false false false }" interface=lxc18028a47c5e0 k8sPodName=openstack/barbican-api-6bc67cc77-hffsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=093d90c4a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-api-6bc67cc77-hffsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=093d90c4a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-api-6bc67cc77-hffsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=093d90c4a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-api-6bc67cc77-hffsf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=093d90c4a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=31080 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-api-6bc67cc77-hffsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=093d90c4a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1002 identity=31080 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-api-6bc67cc77-hffsf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 24e37751-88ef-4cb8-b922-4f7019281035 default }" containerID=e20648e89cddae62621f9d8c58f7388d01db6fb022610378571e252490af1e93 datapathConfiguration="&{false false false false false }" interface=lxc720dd9563236 k8sPodName=openstack/barbican-db-init-ql4zf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e20648e89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-init-ql4zf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e20648e89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-init-ql4zf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e20648e89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=11817 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-init-ql4zf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e20648e89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=11817 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-init-ql4zf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=093d90c4a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1002 identity=31080 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-api-6bc67cc77-hffsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=093d90c4a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1002 identity=31080 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/barbican-api-6bc67cc77-hffsf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e20648e89c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=141 identity=11817 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-init-ql4zf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e20648e89c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=11817 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-init-ql4zf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e20648e89c endpointID=141 k8sNamespace=openstack k8sPodName=barbican-db-init-ql4zf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=c6032c75-b163-44c8-b090-85821b7d3b60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e20648e89c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=11817 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/barbican-db-init-ql4zf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 bb13f2f5-a906-40a8-a7f0-c9e84e3f982a default }" containerID=3431202c5874ff6626d1421878bd30e0e79d287e42301845b748f5c487268860 datapathConfiguration="&{false false false false false }" interface=lxc9b8d738e19da k8sPodName=openstack/barbican-db-sync-hm5mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3431202c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-hm5mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3431202c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-hm5mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3431202c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=26592 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-hm5mz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3431202c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3007 identity=26592 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-hm5mz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3431202c58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3007 identity=26592 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-hm5mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3431202c58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3007 identity=26592 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-hm5mz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3431202c58 endpointID=3007 k8sNamespace=openstack k8sPodName=barbican-db-sync-hm5mz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=bf028bad-6021-49c6-a6ad-8c7ee0c15df1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3431202c58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3007 identity=26592 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-db-sync-hm5mz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 9e32e2d3-17ce-4f0a-9f95-55ee2e05b101 default }" containerID=3a11cafc3c426aeb3c5bd6e30d3f21aa54b85ca86f59f826435a38e1889000bf datapathConfiguration="&{false false false false false }" interface=lxc17099866dc94 k8sPodName=openstack/barbican-rabbit-init-zpg8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a11cafc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-zpg8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a11cafc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-zpg8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a11cafc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=46900 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-zpg8v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3a11cafc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=46900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-zpg8v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a11cafc3c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3220 identity=46900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-zpg8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a11cafc3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3220 identity=46900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-zpg8v subsys=daemon level=info msg="Delete endpoint request" containerID=3a11cafc3c endpointID=3220 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-zpg8v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=73141731-f4cd-499b-b3e3-0f1ddd4dc949 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3a11cafc3c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3220 identity=46900 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/barbican-rabbit-init-zpg8v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 4963396c-60ce-4825-ad3c-117e0b9493c9 default }" containerID=36e92889ea863745445eb22a002d8a0f0f2ff500cb16d751cdfd3ae80e6d8aa3 datapathConfiguration="&{false false false false false }" interface=lxcc1aa5061ff90 k8sPodName=openstack/barbican-ks-service-5hz4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36e92889ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36e92889ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=36e92889ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=36e92889ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=64263 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36e92889ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2349 identity=64263 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36e92889ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2349 identity=64263 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=36e92889ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=64263 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36e92889ea endpointID=2349 k8sNamespace=openstack k8sPodName=barbican-ks-service-5hz4c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=b5e496c0-423e-4d6d-aa76-9599222c14b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=36e92889ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2349 identity=64263 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-service-5hz4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 7859d85f-37d8-4301-ae02-635400aff79e default }" containerID=8e33e47c07a6d942b9475b1d09f810dce9884e279659553d86920ca4be4ac82d datapathConfiguration="&{false false false false false }" interface=lxc103a6b64dd7b k8sPodName=openstack/barbican-ks-endpoints-b4sjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e33e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-endpoints-b4sjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e33e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=38048a25-6717-4244-9797-0d72b90a0af6,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=38048a25-6717-4244-9797-0d72b90a0af6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-endpoints-b4sjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=38048a25-6717-4244-9797-0d72b90a0af6;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=38048a25-6717-4244-9797-0d72b90a0af6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e33e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=61366 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=38048a25-6717-4244-9797-0d72b90a0af6,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=38048a25-6717-4244-9797-0d72b90a0af6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-endpoints-b4sjn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8e33e47c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=61366 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-endpoints-b4sjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e33e47c07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=61366 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-endpoints-b4sjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e33e47c07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=61366 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-endpoints-b4sjn subsys=daemon level=info msg="Delete endpoint request" containerID=8e33e47c07 endpointID=131 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-b4sjn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=38048a25-6717-4244-9797-0d72b90a0af6 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=38048a25-6717-4244-9797-0d72b90a0af6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8e33e47c07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=61366 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-ks-endpoints-b4sjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 7a6a180d-d8bd-4837-afbe-3bf5394eb3ed default }" containerID=88641e8f135164fe23d16787d7a025c40699cb0c755242f8c1a478f53577f199 datapathConfiguration="&{false false false false false }" interface=lxc2d48ee0cea1a k8sPodName=openstack/barbican-ks-user-prf8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88641e8f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88641e8f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=88641e8f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88641e8f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=20163 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88641e8f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=20163 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88641e8f13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=655 identity=20163 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=88641e8f13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=655 identity=20163 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=88641e8f13 endpointID=655 k8sNamespace=openstack k8sPodName=barbican-ks-user-prf8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=bd40303e-3b92-4446-a9fb-95af15f4dcbe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=88641e8f13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=655 identity=20163 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-prf8x subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.1 9a31ca16-fa07-432e-9e3c-8952a98d1a60 default }" containerID=07c7fab8ef8bc1c07866dcd05eb8a6f8351b20c5c787462a98158085c7add934 datapathConfiguration="&{false false false false false }" interface=lxccf20dbff9cf0 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-67rt4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07c7fab8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-67rt4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07c7fab8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-67rt4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07c7fab8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=28747 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-67rt4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07c7fab8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=28747 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-67rt4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07c7fab8ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1397 identity=28747 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-67rt4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07c7fab8ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1397 identity=28747 ipv4=10.0.0.1 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-67rt4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 d286529a-7f71-438d-9674-60d87eda1c9c default }" containerID=4fefefc25c3b727a5013eb04f8d8946875913857861825acb98ee227adc4ee1d datapathConfiguration="&{false false false false false }" interface=lxce84eaf54c887 k8sPodName=openstack/rook-ceph-detect-version-nlk84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fefefc25c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nlk84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fefefc25c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nlk84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fefefc25c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 identity=4785 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nlk84 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4fefefc25c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3998 identity=4785 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nlk84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fefefc25c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3998 identity=4785 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nlk84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fefefc25c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3998 identity=4785 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nlk84 subsys=daemon level=info msg="Delete endpoint request" containerID=4fefefc25c endpointID=3998 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-nlk84 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=1db5fea1-d6c3-4cdd-884e-175751786be6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4fefefc25c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3998 identity=4785 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nlk84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 2394f82c-5e68-4376-ae32-88c031718a57 default }" containerID=c8ae13874c67b092d2bf9a1d741dcd8b2519bc20d9d3f811f738df0ae3133ac9 datapathConfiguration="&{false false false false false }" interface=lxc7f8adbcb5d91 k8sPodName=openstack/ceph-object-controller-detect-version-mc87f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8ae13874c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8ae13874c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c8ae13874c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8ae13874c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identity=992 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8ae13874c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2029 identity=992 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8ae13874c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2029 identity=992 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8ae13874c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2029 identity=992 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c8ae13874c endpointID=2029 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mc87f subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8d3a3a5a-6f85-4705-ab39-97d959c8ffeb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c8ae13874c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2029 identity=992 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mc87f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 df7a491f-9345-4249-97a8-00acb945ec11 default }" containerID=2baf4d0a33e221e2be70738fe916a35b631be01be663dabc840258da7bc083bd datapathConfiguration="&{false false false false false }" interface=lxc22d4b144fca0 k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2baf4d0a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2baf4d0a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2baf4d0a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=50212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2baf4d0a33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=50212 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2baf4d0a33 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=746 identity=50212 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2baf4d0a33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=746 identity=50212 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 subsys=daemon level=info msg="Delete endpoint request" containerID=2baf4d0a33 endpointID=746 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2baf4d0a33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=746 identity=50212 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-157f9586-7c5b-4d24-b2db-ffcab2ebec89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 04afc0b7-2c1f-4fb1-8b0d-e79495777f4a default }" containerID=5986d645c208380fe6d57ac3e94356fd2f1c7efeb0e6d6bf73345b1ce40587aa datapathConfiguration="&{false false false false false }" interface=lxc941cfa90f5b8 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5986d645c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5986d645c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5986d645c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=5210 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5986d645c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=5210 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5986d645c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=319 identity=5210 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5986d645c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=319 identity=5210 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.83 6e33ee49-b60e-4d08-b71f-97b05fcb45d5 default }" containerID=3f9cd1b600a40d37ebb87ea9deac33ed84ada245085d8085861e4012fd7df41a datapathConfiguration="&{false false false false false }" interface=lxcc0a1e49373ed k8sPodName=openstack/glance-db-init-h67vx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f9cd1b600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-h67vx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f9cd1b600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60bcb109-44df-480a-b359-aea0c127a115,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=60bcb109-44df-480a-b359-aea0c127a115,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-h67vx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=60bcb109-44df-480a-b359-aea0c127a115;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=60bcb109-44df-480a-b359-aea0c127a115;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f9cd1b600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=2253 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60bcb109-44df-480a-b359-aea0c127a115,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=60bcb109-44df-480a-b359-aea0c127a115,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-h67vx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3f9cd1b600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=807 identity=2253 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-h67vx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f9cd1b600 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=807 identity=2253 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-h67vx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f9cd1b600 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=807 identity=2253 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-h67vx subsys=daemon level=info msg="Delete endpoint request" containerID=3f9cd1b600 endpointID=807 k8sNamespace=openstack k8sPodName=glance-db-init-h67vx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=60bcb109-44df-480a-b359-aea0c127a115 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=60bcb109-44df-480a-b359-aea0c127a115 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3f9cd1b600 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=807 identity=2253 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-db-init-h67vx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 0723dfd9-7006-4fb3-b16c-30a23db1f79b default }" containerID=22ae2d63b771449848958dae2405f2ff89fa7a8912f32b0aefc928cecb78f2ec datapathConfiguration="&{false false false false false }" interface=lxc77588386f4ff k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z5fx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22ae2d63b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z5fx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22ae2d63b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z5fx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22ae2d63b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=59589 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z5fx2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=22ae2d63b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=59589 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z5fx2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 9de2519c-2407-4049-b2c3-91e8ab4cdd97 default }" containerID=f0bb3f8ec938ef8d2f5b20530138e4687a205546f33198b7dc596ea4d96bfb23 datapathConfiguration="&{false false false false false }" interface=lxce30081e4793c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qqtdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0bb3f8ec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qqtdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0bb3f8ec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qqtdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0bb3f8ec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identity=22702 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qqtdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0bb3f8ec9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2283 identity=22702 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qqtdx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22ae2d63b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=171 identity=59589 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z5fx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22ae2d63b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=171 identity=59589 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z5fx2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f0bb3f8ec9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2283 identity=22702 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qqtdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0bb3f8ec9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2283 identity=22702 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qqtdx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 66d646d0-8aeb-4004-8e41-9aceafdef7d9 default }" containerID=2e778b9901b50acb0884042cbb0b49db374eb22d97360c377702ba70fcbcdce8 datapathConfiguration="&{false false false false false }" interface=lxc1811851a0537 k8sPodName=openstack/glance-db-sync-xp46g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e778b9901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-xp46g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e778b9901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-xp46g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e778b9901 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2975 identity=6111 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-xp46g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e778b9901 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2975 identity=6111 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-xp46g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2e778b9901 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2975 identity=6111 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-xp46g subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e778b9901 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2975 identity=6111 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-xp46g subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e778b9901 endpointID=2975 k8sNamespace=openstack k8sPodName=glance-db-sync-xp46g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=380467b8-d787-4568-8c8a-ebeda9ca855b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2e778b9901 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2975 identity=6111 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-xp46g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 927115a8-cd79-4cf1-b2ba-d23cb2975c8b default }" containerID=4302a0542c6303eabddc8d4b8dd37bf968cf38b876e7232c93d7e22d665d5465 datapathConfiguration="&{false false false false false }" interface=lxc78e9730efdab k8sPodName=openstack/glance-rabbit-init-kd6fk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4302a0542c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-kd6fk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4302a0542c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-kd6fk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4302a0542c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=37145 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-kd6fk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4302a0542c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2996 identity=37145 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-kd6fk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4302a0542c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2996 identity=37145 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-kd6fk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4302a0542c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=37145 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-kd6fk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4302a0542c endpointID=2996 k8sNamespace=openstack k8sPodName=glance-rabbit-init-kd6fk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c3953e25-5fb5-4339-9f70-435b109e4b1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4302a0542c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2996 identity=37145 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/glance-rabbit-init-kd6fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 c0a6e8b0-9f85-4744-b07b-8e12eb746611 default }" containerID=4d28be78d57318c84719f891cb490a26c8bfb0d06dd3c2415c7dd894315a733f datapathConfiguration="&{false false false false false }" interface=lxc68ab8a5a6361 k8sPodName=openstack/glance-ks-service-86pc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d28be78d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-86pc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d28be78d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-86pc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d28be78d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identity=27374 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-86pc7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4d28be78d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identity=27374 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-86pc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d28be78d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1605 identity=27374 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-86pc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d28be78d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1605 identity=27374 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-86pc7 subsys=daemon level=info msg="Delete endpoint request" containerID=4d28be78d5 endpointID=1605 k8sNamespace=openstack k8sPodName=glance-ks-service-86pc7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=04ea5b02-bec2-408a-90e5-9f9d92d0d52e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4d28be78d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1605 identity=27374 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-service-86pc7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 0c8d837b-fc8e-4a73-8134-a30b94c3777b default }" containerID=f706030327dc19aaa2ab947f78053663a460a99d880b87038536b8079f0f71e5 datapathConfiguration="&{false false false false false }" interface=lxc05e20b6a1985 k8sPodName=openstack/glance-ks-endpoints-xgjlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f706030327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-xgjlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f706030327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-xgjlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f706030327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=44927 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-xgjlt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f706030327 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=44927 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-xgjlt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f706030327 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=198 identity=44927 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-xgjlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f706030327 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=44927 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-xgjlt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f706030327 endpointID=198 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xgjlt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f9f6b777-ddbb-4c45-8191-9f488ef64006 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f706030327 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=44927 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-xgjlt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 1b1d0929-9670-4ae3-b5ef-7b50dae8a7b5 default }" containerID=33373ab5bd7c9e5e0d04a8d610d982a6418d11b8a70d24ebe52374cb77328f94 datapathConfiguration="&{false false false false false }" interface=lxc01fdcf898098 k8sPodName=openstack/glance-ks-user-cbbcz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33373ab5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-cbbcz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33373ab5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-cbbcz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=33373ab5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=29415 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-cbbcz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33373ab5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2810 identity=29415 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-cbbcz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33373ab5bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2810 identity=29415 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-cbbcz subsys=endpoint level=info msg="Successful endpoint creation" containerID=33373ab5bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=29415 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-cbbcz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33373ab5bd endpointID=2810 k8sNamespace=openstack k8sPodName=glance-ks-user-cbbcz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=388fed94-49d2-4aee-9d2c-6866bf4aed45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=33373ab5bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2810 identity=29415 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-cbbcz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 5f6ccff6-de1a-4573-ba66-46c7b1451145 default }" containerID=8db09666af330ecb45a522ca441f11c8a5813bbd03c61da989ec67acbae799da datapathConfiguration="&{false false false false false }" interface=lxc4238153877cd k8sPodName=openstack/glance-metadefs-load-vxpb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8db09666af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8db09666af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8db09666af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8db09666af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=4007 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8db09666af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=4007 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8db09666af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=4007 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8db09666af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=4007 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8db09666af endpointID=606 k8sNamespace=openstack k8sPodName=glance-metadefs-load-vxpb7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=20d43a72-3e55-4f3d-87a0-cae513f6f35e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8db09666af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=4007 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-metadefs-load-vxpb7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 a84e4fa1-125a-43be-9f2b-1348f34591ff default }" containerID=7977a3538f4d8d8140f941adbda64d5e7854dfcfb50abb06e777bcdaa7f45d88 datapathConfiguration="&{false false false false false }" interface=lxc06b13c94b429 k8sPodName=openstack/glance-storage-init-dvjgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7977a3538f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-dvjgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7977a3538f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-dvjgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7977a3538f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=6312 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-dvjgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7977a3538f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=6312 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-dvjgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7977a3538f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=690 identity=6312 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-dvjgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7977a3538f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=6312 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-dvjgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7977a3538f endpointID=690 k8sNamespace=openstack k8sPodName=glance-storage-init-dvjgq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=43a9dc5b-5981-4b30-a710-0642abf11536 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7977a3538f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=690 identity=6312 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-storage-init-dvjgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 4473794f-2ca3-49b6-becb-700d8003ea1d default }" containerID=365f46e0b8b4a71dbe613acd97a676baa395f056479df096cb1c7eb413bf9fe2 datapathConfiguration="&{false false false false false }" interface=lxcf7c2e9f1f22f k8sPodName=openstack/glance-api-bd966fcfd-gfh4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=365f46e0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-bd966fcfd-gfh4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=365f46e0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-bd966fcfd-gfh4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=365f46e0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=20373 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-bd966fcfd-gfh4l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=365f46e0b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=20373 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-bd966fcfd-gfh4l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=365f46e0b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1798 identity=20373 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-bd966fcfd-gfh4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=365f46e0b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1798 identity=20373 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-bd966fcfd-gfh4l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.54 765c787f-6839-4549-b391-13bccc8f7f47 default }" containerID=61a0c874a251caf59a178d5c83a43eb35cb106c6451dda79130602d10770b424 datapathConfiguration="&{false false false false false }" interface=lxcd0c034b6a81d k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61a0c874a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61a0c874a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=61a0c874a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61a0c874a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=44427 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61a0c874a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=44427 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 a3d93947-beb6-4019-92f5-36bdf3b8238a default }" containerID=53a92683ad4858c7bdeaa4889983dd1bcb4cfa8aa2af338d9773b6dbde015ee8 datapathConfiguration="&{false false false false false }" interface=lxc34a4c4c6499e k8sPodName=openstack/staffeln-db-init-hwvl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53a92683ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/staffeln-db-init-hwvl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53a92683ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/staffeln-db-init-hwvl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 28351eb6-5d97-4600-96e2-848e3e5d6de2 default }" containerID=06df9560b0057a31040fb6cca4e5c4d9bbb091b6f22f24917015e8db8d157eac datapathConfiguration="&{false false false false false }" interface=lxc99cace6f4357 k8sPodName=openstack/staffeln-api-b6fc6955b-s2h8z labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=06df9560b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-api-b6fc6955b-s2h8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06df9560b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-api-b6fc6955b-s2h8z subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53a92683ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=36219 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/staffeln-db-init-hwvl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53a92683ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=36219 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/staffeln-db-init-hwvl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06df9560b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=36449 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-api-b6fc6955b-s2h8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06df9560b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=36449 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-api-b6fc6955b-s2h8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61a0c874a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=180 identity=44427 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61a0c874a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=44427 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/staffeln-conductor-77458fd595-dhwb8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=53a92683ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=127 identity=36219 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/staffeln-db-init-hwvl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53a92683ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=36219 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/staffeln-db-init-hwvl8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=06df9560b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=223 identity=36449 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-api-b6fc6955b-s2h8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=06df9560b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=36449 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-api-b6fc6955b-s2h8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53a92683ad endpointID=127 k8sNamespace=openstack k8sPodName=staffeln-db-init-hwvl8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5d8d94ff-d098-4f3b-8c85-7000e448c82f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=53a92683ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=36219 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/staffeln-db-init-hwvl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 52b0d639-da97-4dcf-aaf6-af0cacf46a1a default }" containerID=ad65a4b21170fa43b393266852b0c0aaf0980f8899aca368f1a2e43f0b2df6fb datapathConfiguration="&{false false false false false }" interface=lxc08c6b3869fcc k8sPodName=openstack/staffeln-db-sync-mmdxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad65a4b211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-mmdxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad65a4b211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bfab261b-39af-4859-9ea9-9ffd51c2d345,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=bfab261b-39af-4859-9ea9-9ffd51c2d345,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-mmdxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=bfab261b-39af-4859-9ea9-9ffd51c2d345;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=bfab261b-39af-4859-9ea9-9ffd51c2d345;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad65a4b211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 identity=10471 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bfab261b-39af-4859-9ea9-9ffd51c2d345,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=bfab261b-39af-4859-9ea9-9ffd51c2d345,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-mmdxd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ad65a4b211 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 identity=10471 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-mmdxd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad65a4b211 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2505 identity=10471 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-mmdxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad65a4b211 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2505 identity=10471 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-mmdxd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager