level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="778.328µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="42.341µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="816.51µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="3.98µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=90.465231ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.11µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.25µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="66.492µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="136.353µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="84.392µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="405.03µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.05µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.366044ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=4.734766ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="34.821µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.261µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="414.78µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.662µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="54.202µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=57.228789ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="130.663µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="26.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="9.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.231.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.314024ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.493746ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.699045ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="10.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.42µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.391µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="40.311µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="285.777µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.56µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="200.195µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="631.895µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.073187ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.55µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="12.11µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.231 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.231 ipAddr.ipv6="" k8sNodeIP=199.19.213.231 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.231" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.9" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.231" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.231} {CiliumInternalIP 10.0.0.9}] 10.0.0.0/24 [] [] 10.0.0.216 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43731" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.416210977s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="185.964µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="15.64µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="33.29µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="39.201µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3363 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3363 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3363 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.44627804s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=291.265418ms file-path=/var/run/cilium/state/templates/869bd472012e7fea2b5c2dc72207a55787968e12663ab11c766c81baea8cd0cd/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3363 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 ipv4=10.0.0.216 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identityLabels="reserved:health" ipv4=10.0.0.216 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=4 identityLabels="reserved:health" ipv4=10.0.0.216 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.107564896s file-path=/var/run/cilium/state/templates/e5495e84be5fa67c2bd14eec0e0e58d00ea491a67d2e4fe6864343abf59e7951/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=87 identity=4 ipv4=10.0.0.216 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 8df59306-4e09-4db9-8dfa-6940b7d2512b default }" containerID=d43a94fdecbb65c0b1d66060261c8268e5b3eed603919f17a0d86168576e0214 datapathConfiguration="&{false false false false false }" interface=lxca2f0a73aced1 k8sPodName=kube-system/coredns-67659f764b-bpvxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d43a94fdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-bpvxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d43a94fdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-bpvxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d43a94fdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 identity=13989 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-bpvxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d43a94fdec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1467 identity=13989 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-bpvxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d43a94fdec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1467 identity=13989 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-bpvxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d43a94fdec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1467 identity=13989 ipv4=10.0.0.170 ipv6= k8sPodName=kube-system/coredns-67659f764b-bpvxm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 d4fc949b-837a-4edc-80e1-d3a2614120f1 default }" containerID=a8451453f767451a7e4b1ad5bef30f3792b4d57481761057ab2f646a2cd25817 datapathConfiguration="&{false false false false false }" interface=lxcea7c1e0c5697 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vmdqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8451453f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vmdqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 9f3c8b8b-b342-4b9f-a890-f27605d28092 default }" containerID=b4d23a3de9e8495396c79679a5fe515eb077688ba321c3d0e354d573a89fe25a datapathConfiguration="&{false false false false false }" interface=lxc25947c7be7c6 k8sPodName=kube-system/coredns-67659f764b-pqk2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4d23a3de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pqk2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8451453f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vmdqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b4d23a3de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pqk2v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b4d23a3de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=13989 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pqk2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4d23a3de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=13989 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pqk2v subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8451453f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identity=7011 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vmdqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8451453f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identity=7011 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vmdqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 ea252b66-bf95-4392-8d23-e4a3d37f2336 default }" containerID=380354a1a64315ce20593bf56651a85496b44e0a0a85a6bf0bebbc50be284c6a datapathConfiguration="&{false false false false false }" interface=lxc566a11b0cd97 k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=380354a1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=380354a1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=380354a1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=49654 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=380354a1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=49654 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4d23a3de9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=21 identity=13989 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pqk2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4d23a3de9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=21 identity=13989 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-67659f764b-pqk2v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a8451453f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1711 identity=7011 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vmdqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8451453f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1711 identity=7011 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vmdqp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 4c4c7c7a-8644-4da0-9e79-394822cb39bd default }" containerID=668a103a98b69ebd2ec16b77aae76d9ebe08aba9e3d7167970a240fc17eaf422 datapathConfiguration="&{false false false false false }" interface=lxce8d95617f55f k8sPodName=kube-system/coredns-7c96b6546b-8585v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=668a103a98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8585v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=668a103a98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8585v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=668a103a98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=13989 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8585v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=668a103a98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=13989 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8585v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 f753ae5f-b8bf-4f86-95db-cfca07c2f247 default }" containerID=6e6019b626b2f60578dc91b0a141e5321bfa374fcd696a904cc2b311dac08d8f datapathConfiguration="&{false false false false false }" interface=lxc816b5e8b3788 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4nnvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e6019b626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4nnvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e6019b626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4nnvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=380354a1a6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=880 identity=49654 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=380354a1a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=880 identity=49654 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 cef617ad-f364-4385-a708-15cfe029361d default }" containerID=6aa2b9f50a916dc7ab8ebc76a4c3433efdaf736296fc98680b1f8c0c1cc38645 datapathConfiguration="&{false false false false false }" interface=lxcc94b9c980fa3 k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6aa2b9f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3194 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6aa2b9f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3194 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 121e3b18-9605-4dce-90e9-4c8b258e0ab4 default }" containerID=2899596637d64b9b4f71f0d7dc36dfc61193ae8a3393e5806e4fa4a43d4dfe6e datapathConfiguration="&{false false false false false }" interface=lxcae18a729c49f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2899596637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2899596637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=668a103a98 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=943 identity=13989 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8585v subsys=endpoint level=info msg="Successful endpoint creation" containerID=668a103a98 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=943 identity=13989 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8585v subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e6019b626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=4631 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4nnvm oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6e6019b626 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=4631 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4nnvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e6019b626 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1111 identity=4631 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4nnvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e6019b626 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1111 identity=4631 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4nnvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6aa2b9f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3194 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2899596637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6aa2b9f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3194 identity=29156 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6aa2b9f50a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3194 identity=29156 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6aa2b9f50a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3194 identity=29156 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns subsys=endpoint level=info msg="Successful endpoint creation" containerID=6aa2b9f50a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3194 identity=29156 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-df9ns subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2899596637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identity=36374 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2899596637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identity=36374 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2899596637 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2531 identity=36374 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2899596637 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2531 identity=36374 ipv4=10.0.0.203 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4zjc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=668a103a98 endpointID=943 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8585v subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=668a103a98 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=943 identity=13989 ipv4=10.0.0.202 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8585v subsys=endpoint level=info msg="Delete endpoint request" containerID=380354a1a6 endpointID=880 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-pms8f subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=d9ef78a1-94bc-4ef2-949a-35f88f5f4b67 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=380354a1a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=880 identity=49654 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pms8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 2bbe501e-6cb3-4ba2-ab09-5846321ef75a default }" containerID=8e7e3c690ecfbde4314b0827ec3e41e8c3410ba1a2dc336366f672ebe68c2f77 datapathConfiguration="&{false false false false false }" interface=lxc91aa1a849de8 k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e7e3c690e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e7e3c690e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8e7e3c690e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e7e3c690e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=4335 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e7e3c690e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1326 identity=4335 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e7e3c690e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1326 identity=4335 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e7e3c690e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1326 identity=4335 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e7e3c690e endpointID=1326 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-ctmfh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=1b77c85d-9058-46f1-8dac-ae03928f4cf1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=8e7e3c690e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1326 identity=4335 ipv4=10.0.0.53 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ctmfh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 1823528a-d742-432e-9d12-a05b1672cb3f default }" containerID=ee56c92943ecf62ded1267e3d1c64c1539594e3dc6a56929beaf8cfd0e5f7621 datapathConfiguration="&{false false false false false }" interface=lxc51ec95c38639 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2lvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee56c92943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2lvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee56c92943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2lvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee56c92943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identity=27074 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2lvd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ee56c92943 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identity=27074 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2lvd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee56c92943 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2229 identity=27074 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2lvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee56c92943 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2229 identity=27074 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2lvd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 e117961b-8306-47ae-988d-d99d6eb160d0 default }" containerID=1e4746251b3236468bde534f6bf9c7fe936f3c919e79fa7b0231bf26819bb126 datapathConfiguration="&{false false false false false }" interface=lxc9d18863c850e k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e4746251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 ipv4=10.0.0.28 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e4746251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.28 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e4746251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=23330 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.28 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e4746251b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=23330 ipv4=10.0.0.28 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e4746251b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=64 identity=23330 ipv4=10.0.0.28 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e4746251b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=64 identity=23330 ipv4=10.0.0.28 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e4746251b endpointID=64 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-68xks subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=5b6d71d8-5cf9-4612-a2ae-c1bb1269675c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=1e4746251b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=64 identity=23330 ipv4=10.0.0.28 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-68xks subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6a310c91-2de6-4e8f-b37a-8e17ff2e83eb] Description:}]" policyAddRequest=5f3ed20d-03b6-424c-853c-39cb7c278a0c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5f3ed20d-03b6-424c-853c-39cb7c278a0c policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=eb49bd68-3efc-4709-81f0-77f755214299] Description:}]" policyAddRequest=472e59fb-38ae-47d1-92aa-404186b8b3dc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=472e59fb-38ae-47d1-92aa-404186b8b3dc policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.79 8faa763b-f626-4eb9-a761-59f83e157c49 default }" containerID=3b902b2aa919aac3607e043b2323b937d29cef9b1dfdadaa3b13bf2f365e10eb datapathConfiguration="&{false false false false false }" interface=lxcfc750bcdb4b4 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tv64v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b902b2aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tv64v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b902b2aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tv64v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b902b2aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identity=5196 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tv64v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b902b2aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identity=5196 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tv64v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b902b2aa9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2003 identity=5196 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tv64v subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b902b2aa9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2003 identity=5196 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-tv64v subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 3cc2f419-ad96-4eb3-a157-dd295217764b default }" containerID=00276dfde4f087a20fb709a13fba0168736bff595b8902a85a9e83c879e40086 datapathConfiguration="&{false false false false false }" interface=lxc4bbb8b9889e8 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q7jt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00276dfde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q7jt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00276dfde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q7jt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00276dfde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=34192 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q7jt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00276dfde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=34192 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q7jt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00276dfde4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=164 identity=34192 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q7jt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00276dfde4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=164 identity=34192 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q7jt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 c5b6873e-7f30-4d5f-a8ee-0c18c88443db default }" containerID=779204e11199b30cfaab5b728c63124cd6cc2420751c8d279d7fa0c809c34bf9 datapathConfiguration="&{false false false false false }" interface=lxc71dbdcbbd1c1 k8sPodName=openstack/pxc-operator-69cb5bbdb9-979cq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=779204e111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-979cq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=779204e111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-979cq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=779204e111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=15296 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-979cq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=779204e111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=15296 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-979cq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=779204e111 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=962 identity=15296 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-979cq subsys=endpoint level=info msg="Successful endpoint creation" containerID=779204e111 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=962 identity=15296 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-979cq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 fca9150f-1619-40a6-bfdf-e16cf4c80e30 default }" containerID=efc5d4cbd0c1a3fe4289386dbad17f2218689f4c44a33fbb870ca0f9e6ca9144 datapathConfiguration="&{false false false false false }" interface=lxc4c84648f082e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efc5d4cbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efc5d4cbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=efc5d4cbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efc5d4cbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=21724 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efc5d4cbd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=21724 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 374ba646-c6ec-4b8c-8b90-b239fba25acc default }" containerID=ae225b357238e8ee7ee090b30531b0e00a112318023cbbd5825ffb37b26127f3 datapathConfiguration="&{false false false false false }" interface=lxcacf136c29653 k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae225b3572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae225b3572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae225b3572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae225b3572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=16933 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efc5d4cbd0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2189 identity=21724 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efc5d4cbd0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2189 identity=21724 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ae225b3572 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1135 identity=16933 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae225b3572 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1135 identity=16933 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae225b3572 endpointID=1135 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ae225b3572 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1135 identity=16933 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5cf111a6-e29b-4f2b-8fac-e96c4b429318 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 8ca4b8f2-28b5-488b-93ab-47116e4a8b38 default }" containerID=d8fc8fdf3228585ac7f659cbcfeb943ef4b1990f305e6e885473745a7eebc2f3 datapathConfiguration="&{false false false false false }" interface=lxcd9a192f9837e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8fc8fdf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8fc8fdf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d8fc8fdf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8fc8fdf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identity=37626 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8fc8fdf32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4011 identity=37626 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8fc8fdf32 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4011 identity=37626 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8fc8fdf32 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4011 identity=37626 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2419caf9-73f5-415c-9c96-cb99b7c26215] Description:}]" policyAddRequest=9f6e4c83-53e7-4428-84d2-534169abaaba subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9f6e4c83-53e7-4428-84d2-534169abaaba policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.208 9e5ab6e9-14a2-4ba0-84fd-3090278bdbea default }" containerID=cbe06ba90a93e4d38bf707a9c876c0a5d49937d76ad039ccb309daf052cbfc0e datapathConfiguration="&{false false false false false }" interface=lxc1134d24bb10b k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbe06ba90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbe06ba90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbe06ba90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbe06ba90a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=16933 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbe06ba90a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2309 identity=16933 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbe06ba90a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2309 identity=16933 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b subsys=daemon level=info msg="Delete endpoint request" containerID=cbe06ba90a endpointID=2309 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cbe06ba90a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2309 identity=16933 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-930b206c-c530-4aa3-8439-e5f642c75a2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 946a9abc-c001-43a0-b26a-b7372711e379 default }" containerID=885172fa27e31933d00a58f72b9fffcd86ff58adc63eab978d9b73a489a3039a datapathConfiguration="&{false false false false false }" interface=lxc5483cc164d63 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=885172fa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=885172fa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=885172fa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=885172fa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=22003 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=885172fa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2867 identity=22003 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=885172fa27 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2867 identity=22003 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=885172fa27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2867 identity=22003 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=13d2ac7c-6626-4a95-9fe1-0e1e6b82760e] Description:}]" policyAddRequest=7bb24b21-3005-4bb1-983e-49a8db97b0c1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7bb24b21-3005-4bb1-983e-49a8db97b0c1 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.166 8cc4a980-0ae3-420e-8d95-881f6d2f507b default }" containerID=ad1a260ee2b8efc6d11856cfb8858721884abd21a6d4b5b7b6688b912e68e89f datapathConfiguration="&{false false false false false }" interface=lxc362debc1caff k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad1a260ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 ipv4=10.0.0.166 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad1a260ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.166 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad1a260ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 identity=42191 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.166 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad1a260ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3004 identity=42191 ipv4=10.0.0.166 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad1a260ee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3004 identity=42191 ipv4=10.0.0.166 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad1a260ee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3004 identity=42191 ipv4=10.0.0.166 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00824123797800533 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.221 5bef5be1-07a5-4581-aa7e-ee4858bf6604 default }" containerID=9c6f0b49eb13c216476ebac8ecc8f2aafbeef7df94b680c3370511663a4c030a datapathConfiguration="&{false false false false false }" interface=lxce5077889202b k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-2sjl8 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.10 f1963154-8cfb-4646-8391-ca7ae1a835b0 default }" containerID=976631fd976829b35841fbd74eb864d782d6796454b4a17f44d090f0ac256fb4 datapathConfiguration="&{false false false false false }" interface=lxca07955cc7018 k8sPodName=monitoring/node-feature-discovery-worker-xqj2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c6f0b49eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-2sjl8 subsys=endpoint level=info msg="New endpoint" containerID=976631fd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xqj2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c6f0b49eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-2sjl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=976631fd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xqj2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c6f0b49eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=34663 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-2sjl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c6f0b49eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1472 identity=34663 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-2sjl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=976631fd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xqj2d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=976631fd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=14567 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xqj2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=976631fd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=14567 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xqj2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 98a9ad3b-ff2d-401c-a740-0fc7a99ac53c default }" containerID=518e9cb8e8f6928492cca3d3903f57da019d01b987eeb6b200d6bde21132a8b0 datapathConfiguration="&{false false false false false }" interface=lxc9dcca78c1786 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h7m5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=518e9cb8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h7m5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=518e9cb8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h7m5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=518e9cb8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=2082 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h7m5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=518e9cb8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=2082 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h7m5h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=976631fd97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=407 identity=14567 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xqj2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=976631fd97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=407 identity=14567 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xqj2d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9c6f0b49eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1472 identity=34663 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-2sjl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c6f0b49eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1472 identity=34663 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-2sjl8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=518e9cb8e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3057 identity=2082 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h7m5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=518e9cb8e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3057 identity=2082 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h7m5h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.104 79c402c7-905f-445a-9c38-c9fe91d1a589 default }" containerID=dbb8ac67be6f8758c8586c2ffc27360fb93312fabce668a361884699c76ce739 datapathConfiguration="&{false false false false false }" interface=lxc00cbb05ee4df k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8x2b8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbb8ac67be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8x2b8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbb8ac67be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8x2b8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbb8ac67be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=5833 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8x2b8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbb8ac67be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1524 identity=5833 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8x2b8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbb8ac67be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1524 identity=5833 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8x2b8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbb8ac67be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1524 identity=5833 ipv4=10.0.0.104 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8x2b8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3363 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03363 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03363 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03363 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03363:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3363 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 821fd38b-c837-4d31-a5f3-2210a39f8aab default }" containerID=66b2c2aa223c1711f73974e17c1f61770a1bcd989f19591444269cb83d0d1c5b datapathConfiguration="&{false false false false false }" interface=lxc2810705e5802 k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b2c2aa22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b2c2aa22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66b2c2aa22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=2706 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=66b2c2aa22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3932 identity=2706 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66b2c2aa22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3932 identity=2706 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b2c2aa22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3932 identity=2706 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h subsys=daemon level=info msg="Delete endpoint request" containerID=66b2c2aa22 endpointID=3932 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-zjj8h subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=68b98fc2-8b54-490d-b959-e75f45c2770d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=66b2c2aa22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3932 identity=2706 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zjj8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 c0a3bf61-9fa1-4720-9436-d4ccc80c3cdd default }" containerID=b67c25f5cd4ac0fd8fdf8b52494c01dd6a4c334c6fa034b15d2a83d1d64db9a0 datapathConfiguration="&{false false false false false }" interface=lxcaabbd6c7ec7b k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.13 6f9c0eb2-c6ea-4c05-8ae0-47c8d06a8009 default }" containerID=ac6394395ac37f0e80783785b1a0f6a749e9392fe2f5c34f2b7afd7324084b88 datapathConfiguration="&{false false false false false }" interface=lxc4c67886865e1 k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b67c25f5cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b67c25f5cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=ac6394395a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac6394395a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 0102505f-2023-416c-9bb2-9c59cbc8178e default }" containerID=a06f4cfed6adda0483d4e5b9112a72007b373caa13f72a36437866e1bcd817fa datapathConfiguration="&{false false false false false }" interface=lxc43086f133ae0 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a06f4cfed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a06f4cfed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b67c25f5cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ac6394395a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a06f4cfed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b67c25f5cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=43511 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b67c25f5cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=43511 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac6394395a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=7678 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac6394395a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=7678 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a06f4cfed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identity=47002 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a06f4cfed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identity=47002 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b67c25f5cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=946 identity=43511 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b67c25f5cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=946 identity=43511 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-dxfdw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a06f4cfed6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1375 identity=47002 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a06f4cfed6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1375 identity=47002 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lxbrl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac6394395a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=7678 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac6394395a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=7678 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8fc4cb4c7-mxlrp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 d40000af-0cc1-42d6-bc61-6efac1d51514 default }" containerID=0a145af395e9dead7be0888c8cc5999d8b6a3bb6ef5e73bfcb0d22aec78f1df3 datapathConfiguration="&{false false false false false }" interface=lxc90b0262b85e1 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a145af395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a145af395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a145af395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=32791 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a145af395 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=32791 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a145af395 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=32791 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a145af395 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=32791 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 008e75cc-8219-4a04-8a2f-3ed77c0791bb default }" containerID=9276445d823da818a56c5741ba4d21e4af2e6d2ab664a057416ece2781a04b0f datapathConfiguration="&{false false false false false }" interface=lxc7c48edeaff3c k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9276445d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9276445d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9276445d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9276445d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=16933 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9276445d82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=839 identity=16933 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9276445d82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=839 identity=16933 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 afb85200-527a-4489-9415-4aa3f82329c9 default }" containerID=d49b82b8d0a86d7569d01e5433620fc16522f49434855dff75dd37bdf4a64791 datapathConfiguration="&{false false false false false }" interface=lxc407328a21905 k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d49b82b8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d49b82b8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d49b82b8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d49b82b8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=16933 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d49b82b8d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1379 identity=16933 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e subsys=endpoint level=info msg="Successful endpoint creation" containerID=d49b82b8d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=16933 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e subsys=daemon level=info msg="Delete endpoint request" containerID=0a145af395 endpointID=781 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-rj4x5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1a0b6876-0670-49da-8b7d-8feefdd4d97f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0a145af395 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=32791 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rj4x5 subsys=endpoint level=info msg="Delete endpoint request" containerID=9276445d82 endpointID=839 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d49b82b8d0 endpointID=1379 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9276445d82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=839 identity=16933 ipv4=10.0.0.30 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa90b1a5-08e6-4680-b1a5-fb0933a98cb5 subsys=endpoint level=info msg="Removed endpoint" containerID=d49b82b8d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=16933 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc6e51c8-628b-4942-a6d2-27153574229e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 853b8158-d01e-4e20-aba4-e3ea73558607 default }" containerID=105b39fb0deca740f4aca5074f1531c94155b30dcbac70969f08c45d1c98e732 datapathConfiguration="&{false false false false false }" interface=lxc82419579e319 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=105b39fb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=105b39fb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=105b39fb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=105b39fb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identity=15935 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=105b39fb0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identity=15935 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 4ceb7916-c95e-413c-bb95-51ce0200351e default }" containerID=0163a4b5d3e1c961118254098d7347a0c1778714bf72f8a1088d9090d38d0144 datapathConfiguration="&{false false false false false }" interface=lxcb664846dd2b8 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0163a4b5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0163a4b5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0163a4b5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identity=11945 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0163a4b5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1881 identity=11945 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=105b39fb0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3172 identity=15935 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=105b39fb0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3172 identity=15935 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0163a4b5d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1881 identity=11945 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0163a4b5d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1881 identity=11945 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 e8ef648e-f216-455c-aa7f-9ffbbfd65949 default }" containerID=55ef971d825e0a79840b370038e143176490ebe1f38d5eb06a7ba64d08bea57b datapathConfiguration="&{false false false false false }" interface=lxcecd059797232 k8sPodName=monitoring/loki-gateway-cf54cb88c-nbdl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55ef971d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbdl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55ef971d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbdl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55ef971d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identity=1907 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbdl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55ef971d82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3925 identity=1907 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbdl7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 20952c4f-96e4-4c6a-840e-7aab169ac53c default }" containerID=ea0bbee385ee379092876dbaf4164309d7336232ace18276ff9f0fa5c7e7ff11 datapathConfiguration="&{false false false false false }" interface=lxc1f43ef642f4f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea0bbee385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea0bbee385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea0bbee385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=45221 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea0bbee385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=45221 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55ef971d82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3925 identity=1907 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbdl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55ef971d82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3925 identity=1907 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbdl7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 c951e369-7304-427a-929c-1c2a0459b5f2 default }" containerID=e8b9ba54c251fd95de6037d2d50088678788777e0405cc563982da711c8dcab8 datapathConfiguration="&{false false false false false }" interface=lxcd50644dff8da k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8b9ba54c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 0e1c006b-6160-4b5c-82a1-7b4ba0213a21 default }" containerID=0fa0615862fda9df8fddfdf7b599d315ae69e32643610b1b8843ace7c773b9ee datapathConfiguration="&{false false false false false }" interface=lxc19cafd65ac46 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fa0615862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8b9ba54c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8b9ba54c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 oldIdentity="no identity" subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fa0615862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e8b9ba54c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1736 identity=16933 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fa0615862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 identity=16615 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fa0615862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3935 identity=16615 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea0bbee385 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=114 identity=45221 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea0bbee385 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=114 identity=45221 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e8b9ba54c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1736 identity=16933 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8b9ba54c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1736 identity=16933 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0fa0615862 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3935 identity=16615 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fa0615862 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3935 identity=16615 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 afd75cd8-0e73-462d-bcb3-0ac764c45b4f default }" containerID=71d0860f0e9839c7385aca9cd83ad6cab85e7c349d74e915dec93df48b23386a datapathConfiguration="&{false false false false false }" interface=lxcdf57c7c123ee k8sPodName=monitoring/vector-mwmwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71d0860f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/vector-mwmwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71d0860f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/vector-mwmwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71d0860f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=38560 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/vector-mwmwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71d0860f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=38560 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/vector-mwmwm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=71d0860f0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=95 identity=38560 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/vector-mwmwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=71d0860f0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=95 identity=38560 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/vector-mwmwm subsys=daemon level=info msg="Delete endpoint request" containerID=e8b9ba54c2 endpointID=1736 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e8b9ba54c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1736 identity=16933 ipv4=10.0.0.28 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea6a9d89-2e8f-42ea-8515-e1558c2453b9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 438f8276-0298-4548-ac28-0139b8d7f827 default }" containerID=e0c9994bc421bd6d6ef67e8fd1b756eeafde6ca1c11f1b42657b4d540d429382 datapathConfiguration="&{false false false false false }" interface=lxc7b48ae9ac9f1 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0c9994bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0c9994bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0c9994bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identity=9405 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0c9994bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identity=9405 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0c9994bc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3517 identity=9405 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0c9994bc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3517 identity=9405 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 0fb602c9-9d62-41dd-b2e6-fcad1443cb7a default }" containerID=de80967ddd778ee1b608062bebca3218db23856f7ff20bddd36a1387c9016d96 datapathConfiguration="&{false false false false false }" interface=lxc9148e455af19 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de80967ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de80967ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=de80967ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de80967ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=52948 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de80967ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=52948 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de80967ddd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=984 identity=52948 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=de80967ddd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=984 identity=52948 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qqwnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 991c4f89-0e66-4b46-8536-dbdd3f8ea3e1 default }" containerID=9d5b38bed1c3b847f0771991ed26f935455cfd06c75b85f09a4c19be5ec1bb07 datapathConfiguration="&{false false false false false }" interface=lxcd3f4dcbf0fb6 k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d5b38bed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d5b38bed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9d5b38bed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d5b38bed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=2007 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d5b38bed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=2007 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d5b38bed1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1938 identity=2007 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d5b38bed1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1938 identity=2007 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tlvt6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 a20b420a-53b5-4496-8cf9-b306eb207d4f default }" containerID=9f9f4e19c0be060bc37e35eda47f0ed68f99c306ac92f8b1dbf2caa1b6bde724 datapathConfiguration="&{false false false false false }" interface=lxc42193079e850 k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f9f4e19c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f9f4e19c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f9f4e19c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f9f4e19c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identity=16933 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f9f4e19c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1318 identity=16933 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f9f4e19c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1318 identity=16933 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 subsys=daemon level=info msg="Delete endpoint request" containerID=9f9f4e19c0 endpointID=1318 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f9f4e19c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1318 identity=16933 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-43fc1b95-222b-4d6f-a113-3e5465117221 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 fcce1e3b-526b-44d8-89bf-fe5671afdc4d default }" containerID=811dc14aff68136a0414d235e844a3802a9df4a10906a5b5853f8db9eb90d913 datapathConfiguration="&{false false false false false }" interface=lxcaf7a392e087b k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=811dc14aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=811dc14aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=811dc14aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=54039 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=811dc14aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=162 identity=54039 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=811dc14aff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=162 identity=54039 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=811dc14aff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=162 identity=54039 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 1c7e0e73-3a1a-4721-9843-478266e17140 default }" containerID=a268ff23dcf2effb41c611221e903825d854de540b608ce4064fe6e6237e2c9a datapathConfiguration="&{false false false false false }" interface=lxca0b82d68abbb k8sPodName=openstack/keystone-api-844fdb4564-rzl2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a268ff23dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-844fdb4564-rzl2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a268ff23dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-844fdb4564-rzl2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a268ff23dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=33885 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-844fdb4564-rzl2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a268ff23dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=33885 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-844fdb4564-rzl2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a268ff23dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=33885 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-844fdb4564-rzl2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a268ff23dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=33885 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-844fdb4564-rzl2d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 99162f6e-014c-427b-a6e6-f58c7d87be07 default }" containerID=5d0a8603756c60a8e08172db7378a625242d7652607fd18b5f5a26b2240a72c4 datapathConfiguration="&{false false false false false }" interface=lxc5d56be1fb456 k8sPodName=openstack/keystone-credential-setup-mqqn7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d0a860375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-mqqn7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d0a860375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-mqqn7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d0a860375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=10620 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-mqqn7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d0a860375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=10620 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-mqqn7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d0a860375 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=671 identity=10620 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-mqqn7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d0a860375 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=671 identity=10620 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-mqqn7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d0a860375 endpointID=671 k8sNamespace=openstack k8sPodName=keystone-credential-setup-mqqn7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6565f54f-4ee2-4773-85ab-70b6493f9926 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5d0a860375 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=671 identity=10620 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-mqqn7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 0315d67d-3367-4c9d-aec0-41c4e57ccc9e default }" containerID=285b20f97c422b03577857a74b1d46ba9b13f5ef3b1ad67c4232a21464e5c37e datapathConfiguration="&{false false false false false }" interface=lxc0605d52dde7e k8sPodName=openstack/keystone-db-init-vldfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=285b20f97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=285b20f97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=285b20f97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=285b20f97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=32587 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=285b20f97c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=32587 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=285b20f97c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=616 identity=32587 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=285b20f97c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=616 identity=32587 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=285b20f97c endpointID=616 k8sNamespace=openstack k8sPodName=keystone-db-init-vldfc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=98cbe5ea-df93-4e35-b925-87c524e4c0ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=285b20f97c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=616 identity=32587 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-db-init-vldfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 7fd715cb-0e81-4d0b-a9b2-c9d7c48ab079 default }" containerID=8225f6550e17c8e92a3c9a6ff527b945de10e1460ee3ef1c3d000744c08e1ca4 datapathConfiguration="&{false false false false false }" interface=lxcb053fa7c105a k8sPodName=openstack/keystone-fernet-setup-9glms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8225f6550e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8225f6550e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=640d7118-d460-459b-a818-ccd1598d8050,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=640d7118-d460-459b-a818-ccd1598d8050,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8225f6550e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=640d7118-d460-459b-a818-ccd1598d8050;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=640d7118-d460-459b-a818-ccd1598d8050;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8225f6550e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=9008 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=640d7118-d460-459b-a818-ccd1598d8050,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=640d7118-d460-459b-a818-ccd1598d8050,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8225f6550e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=9008 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8225f6550e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=495 identity=9008 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms subsys=endpoint level=info msg="Successful endpoint creation" containerID=8225f6550e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=495 identity=9008 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8225f6550e endpointID=495 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-9glms subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=640d7118-d460-459b-a818-ccd1598d8050 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=640d7118-d460-459b-a818-ccd1598d8050 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8225f6550e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=495 identity=9008 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-fernet-setup-9glms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 9da9d2f3-8180-4356-835a-976c1bb5e4b6 default }" containerID=a03e8881d7d58075366246a9c79b686ed6d0c80ad902a621bf501268f379a160 datapathConfiguration="&{false false false false false }" interface=lxc1eb48122451f k8sPodName=openstack/keystone-db-sync-kh4r6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a03e8881d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-kh4r6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a03e8881d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-kh4r6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a03e8881d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identity=3713 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-kh4r6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a03e8881d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2141 identity=3713 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-kh4r6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a03e8881d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2141 identity=3713 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-kh4r6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a03e8881d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2141 identity=3713 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-kh4r6 subsys=daemon level=info msg="Delete endpoint request" containerID=a03e8881d7 endpointID=2141 k8sNamespace=openstack k8sPodName=keystone-db-sync-kh4r6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d6e787d9-86a5-488f-af4b-2041a3f0370f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a03e8881d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2141 identity=3713 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-db-sync-kh4r6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 2b751d77-c707-480e-9405-c0e3cde10186 default }" containerID=daa7e05e8b2759b2470f1e22a6b4c9bb08edb1f5cfbc95cbabe549c5372faab6 datapathConfiguration="&{false false false false false }" interface=lxc95341c0c86ac k8sPodName=openstack/keystone-rabbit-init-8s7v6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daa7e05e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-rabbit-init-8s7v6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daa7e05e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-rabbit-init-8s7v6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daa7e05e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=60915 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-rabbit-init-8s7v6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daa7e05e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=60915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-rabbit-init-8s7v6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=daa7e05e8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2090 identity=60915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-rabbit-init-8s7v6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=daa7e05e8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=60915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-rabbit-init-8s7v6 subsys=daemon level=info msg="Delete endpoint request" containerID=daa7e05e8b endpointID=2090 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8s7v6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=94c9e9fd-e108-4660-928e-36e86e6174c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=daa7e05e8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=60915 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-rabbit-init-8s7v6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 1f682ee3-7cb0-4cfd-a58c-db7735f165fd default }" containerID=824a06eb8e6d135a71c241cfc2eace3c4184295aea5984dffa827877ad3187c5 datapathConfiguration="&{false false false false false }" interface=lxc1dc405c20a65 k8sPodName=openstack/keystone-domain-manage-gmrjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=824a06eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-gmrjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=824a06eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-gmrjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=824a06eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=50010 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-gmrjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=824a06eb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=50010 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-gmrjs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=824a06eb8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1819 identity=50010 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-gmrjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=824a06eb8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1819 identity=50010 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-gmrjs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=824a06eb8e endpointID=1819 k8sNamespace=openstack k8sPodName=keystone-domain-manage-gmrjs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=85732cf8-a16e-46bf-8f0a-71aa68cbf617 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=824a06eb8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1819 identity=50010 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-domain-manage-gmrjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 c4ca54c5-43c5-4fe2-8a3e-6871a950f06e default }" containerID=fd889cf486cb94091213d34462c6bcfdb934b6bbe0329939f2155ce8b47f02ae datapathConfiguration="&{false false false false false }" interface=lxce24bb3d34e87 k8sPodName=openstack/keystone-bootstrap-bttjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd889cf486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-bttjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd889cf486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=279bf5c9-e882-4506-8f75-23af056489a7,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=279bf5c9-e882-4506-8f75-23af056489a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-bttjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=279bf5c9-e882-4506-8f75-23af056489a7;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=279bf5c9-e882-4506-8f75-23af056489a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd889cf486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=2673 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=279bf5c9-e882-4506-8f75-23af056489a7,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=279bf5c9-e882-4506-8f75-23af056489a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-bttjm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd889cf486 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1008 identity=2673 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-bttjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd889cf486 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1008 identity=2673 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-bttjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd889cf486 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1008 identity=2673 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-bttjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd889cf486 endpointID=1008 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bttjm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=279bf5c9-e882-4506-8f75-23af056489a7 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=279bf5c9-e882-4506-8f75-23af056489a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fd889cf486 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1008 identity=2673 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/keystone-bootstrap-bttjm subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.033813762224897535 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.233 ff085fc9-3b6c-46b0-9494-8bc158fc7a1f default }" containerID=86ed6f169462310c904408ff183ebd7d09b0ef9422673dcbc733da2e392f01e4 datapathConfiguration="&{false false false false false }" interface=lxc95880a418c1c k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86ed6f1694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86ed6f1694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86ed6f1694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86ed6f1694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=16933 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86ed6f1694 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1113 identity=16933 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86ed6f1694 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1113 identity=16933 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 subsys=daemon level=info msg="Delete endpoint request" containerID=86ed6f1694 endpointID=1113 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=86ed6f1694 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1113 identity=16933 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d7e5ac9f-902f-4acf-b46f-e44f86a40604 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 a4dc3d52-1b26-42b8-a942-d838914f29a8 default }" containerID=f2d3ca401233dd6ebd6b025eda779c266ed65656ab1cc2788535d7c1aac6abcd datapathConfiguration="&{false false false false false }" interface=lxc9904863b4bfd k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2d3ca4012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2d3ca4012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2d3ca4012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=57785 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2d3ca4012 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2954 identity=57785 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f2d3ca4012 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2954 identity=57785 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2d3ca4012 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2954 identity=57785 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 9ee4f353-b9f8-412f-b3dd-0a41e57e678e default }" containerID=75d4a80f06e3d5bc2d33aea3b433d2b832110bef3d2243b6509550cc598f4a5c datapathConfiguration="&{false false false false false }" interface=lxcfc1a10087c62 k8sPodName=openstack/barbican-api-8559ff68fc-wdjv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75d4a80f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-api-8559ff68fc-wdjv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75d4a80f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-api-8559ff68fc-wdjv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75d4a80f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=1807 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-api-8559ff68fc-wdjv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75d4a80f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1279 identity=1807 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-api-8559ff68fc-wdjv4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 87af2e27-5c01-47e2-b41e-81f15b39f1e4 default }" containerID=0cb48f01a9702f8b6f900a1fe1077c271d93389df641c6989eaff10d476df2a1 datapathConfiguration="&{false false false false false }" interface=lxc34257f541534 k8sPodName=openstack/barbican-db-init-nc5fq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cb48f01a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-init-nc5fq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cb48f01a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-init-nc5fq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cb48f01a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=24870 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-init-nc5fq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cb48f01a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=24870 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-init-nc5fq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75d4a80f06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1279 identity=1807 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-api-8559ff68fc-wdjv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=75d4a80f06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1279 identity=1807 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-api-8559ff68fc-wdjv4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0cb48f01a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1308 identity=24870 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-init-nc5fq subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cb48f01a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1308 identity=24870 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-init-nc5fq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0cb48f01a9 endpointID=1308 k8sNamespace=openstack k8sPodName=barbican-db-init-nc5fq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=0ac4bf2e-8752-44bc-a255-d4b8a9511ca2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0cb48f01a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1308 identity=24870 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-db-init-nc5fq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 a045ae8a-fc1a-4b21-8ed8-5e199b840396 default }" containerID=953ec7af95a63fccfe6cb61875868de4ce956a9efba8b8ad68529572e42ba8ec datapathConfiguration="&{false false false false false }" interface=lxccbc7a09681f3 k8sPodName=openstack/barbican-db-sync-g7jwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=953ec7af95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-sync-g7jwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=953ec7af95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-sync-g7jwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=953ec7af95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=1215 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-sync-g7jwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=953ec7af95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=1215 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-sync-g7jwv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=953ec7af95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2124 identity=1215 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-sync-g7jwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=953ec7af95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2124 identity=1215 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-sync-g7jwv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=953ec7af95 endpointID=2124 k8sNamespace=openstack k8sPodName=barbican-db-sync-g7jwv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b9818abd-b471-40e1-a3b2-4ea4d5d65bee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=953ec7af95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2124 identity=1215 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-sync-g7jwv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 b87c6a69-e667-42c8-a514-9fe94204ea23 default }" containerID=710b724ce451d366e9e50d0cc5432a77557459f14664475c8388358c3f814f25 datapathConfiguration="&{false false false false false }" interface=lxc74d4645b7cf7 k8sPodName=openstack/barbican-rabbit-init-vxsjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=710b724ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-rabbit-init-vxsjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=710b724ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-rabbit-init-vxsjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=710b724ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=61808 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-rabbit-init-vxsjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=710b724ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=61808 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-rabbit-init-vxsjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=710b724ce4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=444 identity=61808 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-rabbit-init-vxsjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=710b724ce4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=61808 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-rabbit-init-vxsjn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=710b724ce4 endpointID=444 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vxsjn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8be9dc3f-7a11-403e-b3e6-46fa4227e5f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=710b724ce4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=61808 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-rabbit-init-vxsjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 97f803d0-ebf5-45af-a679-2e7e14e0491c default }" containerID=fac5d4aeb5918fe60e7a8490660fee91d4638be850b8e614997e1e380fe7308c datapathConfiguration="&{false false false false false }" interface=lxcba0e20fbac71 k8sPodName=openstack/barbican-ks-service-nvtwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fac5d4aeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-service-nvtwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fac5d4aeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78a83988-f040-45c8-a69c-876adff25b69,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=78a83988-f040-45c8-a69c-876adff25b69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-service-nvtwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=78a83988-f040-45c8-a69c-876adff25b69;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=78a83988-f040-45c8-a69c-876adff25b69;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fac5d4aeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=14100 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=78a83988-f040-45c8-a69c-876adff25b69,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=78a83988-f040-45c8-a69c-876adff25b69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-service-nvtwc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fac5d4aeb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=14100 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-service-nvtwc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fac5d4aeb5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=73 identity=14100 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-service-nvtwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fac5d4aeb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=73 identity=14100 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-service-nvtwc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fac5d4aeb5 endpointID=73 k8sNamespace=openstack k8sPodName=barbican-ks-service-nvtwc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=78a83988-f040-45c8-a69c-876adff25b69 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=78a83988-f040-45c8-a69c-876adff25b69 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fac5d4aeb5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=73 identity=14100 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-ks-service-nvtwc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 57d14e61-1349-4361-ae48-8a262ef9ac4a default }" containerID=c5968ec8c78f798bfe5b3e15c9fc836c48bd42f2672cc6aeca8f9f5795c91162 datapathConfiguration="&{false false false false false }" interface=lxc9d21c7ec136f k8sPodName=openstack/barbican-ks-endpoints-ns9j2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5968ec8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ns9j2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5968ec8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ns9j2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5968ec8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=33948 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ns9j2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c5968ec8c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=33948 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ns9j2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5968ec8c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=589 identity=33948 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ns9j2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5968ec8c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=33948 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ns9j2 subsys=daemon level=info msg="Delete endpoint request" containerID=c5968ec8c7 endpointID=589 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-ns9j2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d036f02e-28c4-4eaf-847e-fc7fc3e91a6b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c5968ec8c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=33948 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ns9j2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 9a279d27-fb79-4c11-8027-7dc965331794 default }" containerID=9940ad19b55da4ae4f9a86183800a6585ea9c67e654d3b6526ee68afe4db65ab datapathConfiguration="&{false false false false false }" interface=lxc2eae9eafd21d k8sPodName=openstack/barbican-ks-user-l446b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9940ad19b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1196 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-ks-user-l446b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9940ad19b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1196 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-ks-user-l446b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9940ad19b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1196 identity=9460 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-ks-user-l446b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9940ad19b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1196 identity=9460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-ks-user-l446b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9940ad19b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1196 identity=9460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-ks-user-l446b subsys=endpoint level=info msg="Successful endpoint creation" containerID=9940ad19b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1196 identity=9460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-ks-user-l446b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9940ad19b5 endpointID=1196 k8sNamespace=openstack k8sPodName=barbican-ks-user-l446b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=399a0b04-837c-4b9e-863d-c8e32905f04e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9940ad19b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1196 identity=9460 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-ks-user-l446b subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.103 8937da01-7a6a-41ff-b9fe-4a3581dc189d default }" containerID=bcf674683f5da187cab43dfb692d73a3b6f4200fd2e248cb886df66215fb30c5 datapathConfiguration="&{false false false false false }" interface=lxc4dac110918f4 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4667s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcf674683f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.103 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4667s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcf674683f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.103 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4667s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bcf674683f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=18094 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.103 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4667s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcf674683f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=18094 ipv4=10.0.0.103 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4667s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcf674683f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1553 identity=18094 ipv4=10.0.0.103 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4667s subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcf674683f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=18094 ipv4=10.0.0.103 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4667s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.225 22d07781-6a6d-4e31-86c2-0b1578353409 default }" containerID=64ad38cf48432509b347dea8a8e78d270880c735e8ae99924c5e3871f40802b6 datapathConfiguration="&{false false false false false }" interface=lxc92393227c9a2 k8sPodName=openstack/rook-ceph-detect-version-hr2fl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64ad38cf48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hr2fl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64ad38cf48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hr2fl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=64ad38cf48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=1669 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hr2fl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64ad38cf48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=1669 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hr2fl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64ad38cf48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=158 identity=1669 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hr2fl subsys=endpoint level=info msg="Successful endpoint creation" containerID=64ad38cf48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=158 identity=1669 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hr2fl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64ad38cf48 endpointID=158 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hr2fl subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=efb8be37-271d-45c8-9ef9-21a0a325f1ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=64ad38cf48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=158 identity=1669 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hr2fl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 1eff5457-7c3c-4037-8790-e70389f4e736 default }" containerID=d23c3145d2b1745dd79f9ad375186399d0b14f656ab3636434d030d2e7a4ee78 datapathConfiguration="&{false false false false false }" interface=lxc475a28beaf52 k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d23c3145d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d23c3145d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d23c3145d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=16933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d23c3145d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1361 identity=16933 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d23c3145d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1361 identity=16933 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e subsys=endpoint level=info msg="Successful endpoint creation" containerID=d23c3145d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1361 identity=16933 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 15780436-7a05-4f61-9175-a920e3ed7970 default }" containerID=bb50d145da7d7a0da6355a6d36a77c1528b11c667adfff665eef8f8844d2fc7e datapathConfiguration="&{false false false false false }" interface=lxc4267ac4df76e k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb50d145da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb50d145da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb50d145da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=5088 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb50d145da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=5088 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb50d145da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2080 identity=5088 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb50d145da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2080 identity=5088 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d23c3145d2 endpointID=1361 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d23c3145d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1361 identity=16933 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-065e6a6c-c844-4829-b693-fdc4e8f6889e subsys=endpoint level=info msg="Delete endpoint request" containerID=bb50d145da endpointID=2080 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-ktxr5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=f56d24a1-6bca-4dda-8ee6-4c372b8eb247 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=bb50d145da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2080 identity=5088 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ktxr5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 ddf6076b-d41d-48a7-a620-99c9d0f18436 default }" containerID=06d1eb3d7c3aa2a651f90fd0165e579835a888e3ad8747f35951ea0ecb60891f datapathConfiguration="&{false false false false false }" interface=lxc7bf670f568cd k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06d1eb3d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06d1eb3d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=06d1eb3d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06d1eb3d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identity=37947 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06d1eb3d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2472 identity=37947 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06d1eb3d7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2472 identity=37947 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06d1eb3d7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2472 identity=37947 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 7c22ef15-5a0d-4307-be7d-b26dcaad9421 default }" containerID=e3b5b820f6f9bde8c31da769293f08039a28df57b019217b9af5700d605e35a2 datapathConfiguration="&{false false false false false }" interface=lxc6f1bbaef2ec9 k8sPodName=openstack/glance-db-init-qc659 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3b5b820f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-init-qc659 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3b5b820f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25474859-f4b2-4073-9cfc-59e18e395805,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=25474859-f4b2-4073-9cfc-59e18e395805,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-init-qc659 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=25474859-f4b2-4073-9cfc-59e18e395805;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=25474859-f4b2-4073-9cfc-59e18e395805;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e3b5b820f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=12132 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25474859-f4b2-4073-9cfc-59e18e395805,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=25474859-f4b2-4073-9cfc-59e18e395805,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-init-qc659 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3b5b820f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=12132 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-init-qc659 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3b5b820f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=125 identity=12132 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-init-qc659 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3b5b820f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=12132 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-init-qc659 subsys=daemon level=info msg="Delete endpoint request" containerID=e3b5b820f6 endpointID=125 k8sNamespace=openstack k8sPodName=glance-db-init-qc659 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=25474859-f4b2-4073-9cfc-59e18e395805 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=25474859-f4b2-4073-9cfc-59e18e395805 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e3b5b820f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=12132 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-db-init-qc659 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 5c197154-0957-45e6-b800-225659f70a96 default }" containerID=e58ad7cc68a5bdb0f94b4169f4397916b789651f7ea6d0c40da84e0cb7c972c1 datapathConfiguration="&{false false false false false }" interface=lxc13f79b328901 k8sPodName=openstack/glance-db-sync-bfjjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e58ad7cc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-bfjjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e58ad7cc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-bfjjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e58ad7cc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=36992 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-bfjjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e58ad7cc68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=36992 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-bfjjr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e58ad7cc68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=462 identity=36992 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-bfjjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e58ad7cc68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=36992 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-bfjjr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 1de9ec50-5de9-4a92-a47d-0cc0078febe8 default }" containerID=78b9c8cc6751a2d1d6bb8df2634ab587dd6e5dc67115512971b48834bb7e62b2 datapathConfiguration="&{false false false false false }" interface=lxc35ef1bcac726 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5tchq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78b9c8cc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5tchq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78b9c8cc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5tchq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78b9c8cc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 identity=1337 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5tchq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=78b9c8cc67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 identity=1337 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5tchq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 0e45eb81-8074-4948-9d2e-04080cdd456c default }" containerID=b8e6c09c5bd09c7609e9d9ff10273a964dd4c5bade39804ac4b704bc4e80e650 datapathConfiguration="&{false false false false false }" interface=lxcb3522d1fe1ce k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nc4dj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8e6c09c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nc4dj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8e6c09c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nc4dj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8e6c09c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=4924 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nc4dj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8e6c09c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=601 identity=4924 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nc4dj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78b9c8cc67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3952 identity=1337 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5tchq subsys=endpoint level=info msg="Successful endpoint creation" containerID=78b9c8cc67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3952 identity=1337 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5tchq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8e6c09c5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=601 identity=4924 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nc4dj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8e6c09c5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=601 identity=4924 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nc4dj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e58ad7cc68 endpointID=462 k8sNamespace=openstack k8sPodName=glance-db-sync-bfjjr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=abd208c0-1bc8-4630-b3a4-f2f5a8762db0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e58ad7cc68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=36992 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-bfjjr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 d2d4af94-3a38-4b78-8227-46b043811527 default }" containerID=a212d3aee9a12e11e29cf261613037b4f4b5ca4d1d3d8f5db6a0932301802458 datapathConfiguration="&{false false false false false }" interface=lxcf412feb2c46c k8sPodName=openstack/glance-rabbit-init-d72wp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a212d3aee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-d72wp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a212d3aee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-d72wp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a212d3aee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=3853 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-d72wp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a212d3aee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=3853 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-d72wp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a212d3aee9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1001 identity=3853 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-d72wp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a212d3aee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1001 identity=3853 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-d72wp subsys=daemon level=info msg="Delete endpoint request" containerID=a212d3aee9 endpointID=1001 k8sNamespace=openstack k8sPodName=glance-rabbit-init-d72wp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=16be6dc3-8adb-4254-afa5-e03e15993000 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a212d3aee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1001 identity=3853 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-d72wp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 06f3841e-b9e6-43fb-8790-ecfcc72ac7c9 default }" containerID=fe9de57c72d49dc2bde57877136af81dc5b1798261a0b98ba8fc8f7cfb15ba60 datapathConfiguration="&{false false false false false }" interface=lxcdc1f58637985 k8sPodName=openstack/glance-ks-service-sddrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe9de57c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-sddrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe9de57c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-sddrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe9de57c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=39305 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-sddrf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fe9de57c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=39305 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-sddrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe9de57c72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1518 identity=39305 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-sddrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe9de57c72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1518 identity=39305 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-sddrf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe9de57c72 endpointID=1518 k8sNamespace=openstack k8sPodName=glance-ks-service-sddrf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=d02eeeb5-247d-41c5-a501-fb565bf0b85d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fe9de57c72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1518 identity=39305 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/glance-ks-service-sddrf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 c718e6fc-9555-4814-896c-df91222ec9dd default }" containerID=cf0199e6b4b6441dc1f5119fbfdca6084e4a2e827fd82b75f0f6abff0fd877dd datapathConfiguration="&{false false false false false }" interface=lxcec663f5deb4f k8sPodName=openstack/glance-ks-endpoints-2nhwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf0199e6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-2nhwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf0199e6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-2nhwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cf0199e6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=50552 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-2nhwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf0199e6b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1822 identity=50552 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-2nhwr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf0199e6b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1822 identity=50552 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-2nhwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf0199e6b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=50552 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-2nhwr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf0199e6b4 endpointID=1822 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-2nhwr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b561adc8-3edb-4f30-afe3-10a5c9555e4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cf0199e6b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1822 identity=50552 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-2nhwr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 b5e2fd0a-62f3-4bfd-bbfd-7b324f74e5fb default }" containerID=4c09de6bf5c24be0fb332cd02d0229f392eb6bc433e22b316a123911f3de5f0e datapathConfiguration="&{false false false false false }" interface=lxc08935551fca7 k8sPodName=openstack/glance-ks-user-7hs59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c09de6bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-7hs59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c09de6bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-7hs59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c09de6bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=5378 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-7hs59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c09de6bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=5378 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-7hs59 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c09de6bf5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=5378 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-7hs59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c09de6bf5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=5378 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-7hs59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c09de6bf5 endpointID=490 k8sNamespace=openstack k8sPodName=glance-ks-user-7hs59 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f983ae05-dc70-4fa2-a110-dd9d7c2fe9d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4c09de6bf5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=5378 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-ks-user-7hs59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 0587fd07-88f4-43cb-8bf7-81b05f6c977d default }" containerID=e11762ae38bdf6635aad0c718ba7774d3ed6be294a9ded76a7f523912bdf47d5 datapathConfiguration="&{false false false false false }" interface=lxc2383db3e1685 k8sPodName=openstack/glance-metadefs-load-px2pj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e11762ae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e11762ae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e11762ae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e11762ae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=32131 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e11762ae38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=32131 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e11762ae38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2560 identity=32131 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e11762ae38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2560 identity=32131 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e11762ae38 endpointID=2560 k8sNamespace=openstack k8sPodName=glance-metadefs-load-px2pj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7c52cf16-2eac-4630-9169-b976cebdd8e3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e11762ae38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2560 identity=32131 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-metadefs-load-px2pj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 17ba5743-a1b9-48dd-8496-bf211a45589f default }" containerID=e3c42112505f37e0607ac897f55cb3b8910d67af4b67a12b52241ff601621c76 datapathConfiguration="&{false false false false false }" interface=lxc601957055d23 k8sPodName=openstack/glance-storage-init-rk4jx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3c4211250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-storage-init-rk4jx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3c4211250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-storage-init-rk4jx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e3c4211250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=7958 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-storage-init-rk4jx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3c4211250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=7958 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-storage-init-rk4jx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3c4211250 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=932 identity=7958 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-storage-init-rk4jx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3c4211250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=932 identity=7958 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-storage-init-rk4jx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e3c4211250 endpointID=932 k8sNamespace=openstack k8sPodName=glance-storage-init-rk4jx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=9f2bfb24-973f-4c70-bf9b-14e5fcc67557 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e3c4211250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=932 identity=7958 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-storage-init-rk4jx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 4b053cf2-de66-4ff4-b4cf-6cce8166b3a8 default }" containerID=5d2187de7bcb3d0f0a843a544c184889d9d658d2a707f662dcd70eeeca54a137 datapathConfiguration="&{false false false false false }" interface=lxc26c062e0a714 k8sPodName=openstack/glance-api-57ff5888dc-gtrzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d2187de7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-57ff5888dc-gtrzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d2187de7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-57ff5888dc-gtrzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d2187de7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identity=44975 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-57ff5888dc-gtrzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d2187de7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identity=44975 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-57ff5888dc-gtrzr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5d2187de7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=757 identity=44975 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-57ff5888dc-gtrzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d2187de7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=757 identity=44975 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-api-57ff5888dc-gtrzr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 7feff53c-c429-4bc9-8fdc-2ab6823db0d8 default }" containerID=dd345899f03d9f989d7e823fded0ecc00560d14966869b651668ce2b17a77e29 datapathConfiguration="&{false false false false false }" interface=lxc73f3ab5f65c3 k8sPodName=openstack/staffeln-api-6556ff6699-k6b95 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.144 6981486c-5236-40ab-bd24-a3f8ce33876c default }" containerID=a989a14b6a1e27ce82d508cd207b70e865af99bdeaf4c30185ca4a91558cda7e datapathConfiguration="&{false false false false false }" interface=lxc8fb75f0b3d39 k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd345899f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-6556ff6699-k6b95 subsys=endpoint level=info msg="New endpoint" containerID=a989a14b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd345899f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-6556ff6699-k6b95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=a989a14b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd345899f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 identity=1327 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-6556ff6699-k6b95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd345899f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1384 identity=1327 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-6556ff6699-k6b95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a989a14b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a989a14b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=2995 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a989a14b6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=2995 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 29f89d02-05a7-4685-9acb-52b2a9245e51 default }" containerID=b4d5941c58f1087bddb4a8f1b900d6a0830cdf653b8c515a0f5f7d2b96fc9a18 datapathConfiguration="&{false false false false false }" interface=lxc912e2e3a634e k8sPodName=openstack/staffeln-db-init-gdjtd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4d5941c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-gdjtd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4d5941c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-gdjtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4d5941c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=2854 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-gdjtd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4d5941c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=2854 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-gdjtd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd345899f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1384 identity=1327 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-6556ff6699-k6b95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd345899f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1384 identity=1327 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-6556ff6699-k6b95 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a989a14b6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4092 identity=2995 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a989a14b6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4092 identity=2995 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-conductor-884f6dbd4-6k5n5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b4d5941c58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1475 identity=2854 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-gdjtd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4d5941c58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=2854 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-gdjtd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4d5941c58 endpointID=1475 k8sNamespace=openstack k8sPodName=staffeln-db-init-gdjtd subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=ee220fcd-c595-4b65-9038-a1299bb52e4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b4d5941c58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=2854 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-gdjtd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 3221ea39-2cdc-4ca0-a013-faeef7c7ccb3 default }" containerID=afc04765d7010cb3c2dfb92953cce00d5837741c0076b1fffac9e7efb45e16e2 datapathConfiguration="&{false false false false false }" interface=lxceae4630c15fb k8sPodName=openstack/staffeln-db-sync-p7jwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afc04765d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-sync-p7jwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afc04765d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=410b96f4-7589-4e34-b806-8a8c8ba69968,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=410b96f4-7589-4e34-b806-8a8c8ba69968,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-sync-p7jwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=410b96f4-7589-4e34-b806-8a8c8ba69968;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=410b96f4-7589-4e34-b806-8a8c8ba69968;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afc04765d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=1420 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=410b96f4-7589-4e34-b806-8a8c8ba69968,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=410b96f4-7589-4e34-b806-8a8c8ba69968,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-sync-p7jwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afc04765d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=1420 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-sync-p7jwb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=afc04765d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=485 identity=1420 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-sync-p7jwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=afc04765d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=485 identity=1420 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/staffeln-db-sync-p7jwb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager