level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.467502ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="67.912µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.395778ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.881µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.963191ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.69µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.79µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="50.091µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="76.003µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="86.914µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="432.245µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.914514ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.915765ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="72.753µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="62.743µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="253.079µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="118.334µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="84.863µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.972063ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="80.223µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.041µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="6.481µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.65.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.928824ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.414675ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.873662ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.641µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="94.474µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="22.561µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="49.242µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="342.591µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="8.681µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.79µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="249.499µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="845.681µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.273815ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.73µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.331µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.65 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.65 ipAddr.ipv6="" k8sNodeIP=199.204.45.65 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.65" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.253" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.65" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.65} {CiliumInternalIP 10.0.0.253}] 10.0.0.0/24 [] [] 10.0.0.159 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45521" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.651332926s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="18.231µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.491µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="46.861µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="21.651µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.636313303s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=316.249165ms file-path=/var/run/cilium/state/templates/bee0acbbe116bf36c8818067759333d0717a17da2499907fdb3d1a25ddf383f9/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1105 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 ipv4=10.0.0.159 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identityLabels="reserved:health" ipv4=10.0.0.159 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=828 identity=4 identityLabels="reserved:health" ipv4=10.0.0.159 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.151543542s file-path=/var/run/cilium/state/templates/9a3346478d54d956801520c860bc28cab870d8884c422dfd34e7508904e1ed0a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=828 identity=4 ipv4=10.0.0.159 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 374a5b44-5d5f-4c1a-b844-110f7d022657 default }" containerID=5ea2ee0c49356d8127ad6f5248afd24c35f1f34d4693a5f511cb377cd73358ee datapathConfiguration="&{false false false false false }" interface=lxc82ab49cb26d0 k8sPodName=kube-system/coredns-7c96b6546b-82txh labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.120 9781799a-5a76-48e3-94ca-33a87f6f0ab5 default }" containerID=7f34e70a3fb0c61b6e2b6c2bc67881acad5ee655ccf9f3f70fc769f3eeec5e27 datapathConfiguration="&{false false false false false }" interface=lxc8a9a74358613 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ea2ee0c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-82txh subsys=endpoint level=info msg="New endpoint" containerID=7f34e70a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ea2ee0c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-82txh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7f34e70a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ea2ee0c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identity=32429 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-82txh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=5ea2ee0c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identity=32429 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-82txh subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7f34e70a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f34e70a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=45823 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f34e70a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=45823 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ea2ee0c49 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3300 identity=32429 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-82txh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ea2ee0c49 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3300 identity=32429 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-82txh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7f34e70a3f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=386 identity=45823 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f34e70a3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=386 identity=45823 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f34e70a3f endpointID=386 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ff2hj subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=38b3f218-2424-4ea7-b1d8-8c4a1670df5c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=7f34e70a3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=386 identity=45823 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ff2hj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 03c08280-0858-4635-9e97-d99ee8f38ad7 default }" containerID=5ba73787b649198ed06a4e1502cb00b97e4e379c85929af4e58a411189dfcc89 datapathConfiguration="&{false false false false false }" interface=lxca5955a87f522 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ba73787b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ba73787b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5ba73787b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5ba73787b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=18053 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ba73787b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=18053 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ba73787b6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=120 identity=18053 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ba73787b6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=120 identity=18053 ipv4=10.0.0.76 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-69x7j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1105 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01105 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01105 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01105 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01105:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1105 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 419c245b-8fb9-480f-86c8-e548393fb8cd default }" containerID=f89e3b163a47726ba1f829f685233f30342d21260cfe3c86db1deeb85708ea27 datapathConfiguration="&{false false false false false }" interface=lxcd8571365e882 k8sPodName=kube-system/coredns-67659f764b-4spwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f89e3b163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-4spwr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 59c8ce25-c9bf-4462-b9e4-abc78e2a6e07 default }" containerID=e580b635b00747c5567c808fea48cdfd8fd7f734de40f5c662fbff6f4153fcc5 datapathConfiguration="&{false false false false false }" interface=lxcdb153af34834 k8sPodName=kube-system/coredns-67659f764b-qmwl7 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=f89e3b163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-4spwr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f89e3b163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=32429 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-4spwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f89e3b163a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=32429 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-4spwr subsys=endpoint level=info msg="New endpoint" containerID=e580b635b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-qmwl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e580b635b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-qmwl7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e580b635b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=32429 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-qmwl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e580b635b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=32429 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-qmwl7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f89e3b163a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=48 identity=32429 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-4spwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f89e3b163a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=48 identity=32429 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-4spwr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e580b635b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1042 identity=32429 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-qmwl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e580b635b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1042 identity=32429 ipv4=10.0.0.54 ipv6= k8sPodName=kube-system/coredns-67659f764b-qmwl7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 580ccab2-579d-4a21-87f3-8746b70d4191 default }" containerID=f1f5fd248f7b0ac79e61849c39f62051464f1b7707b534999f9ad06d997b4365 datapathConfiguration="&{false false false false false }" interface=lxcac3519f44b00 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-js467 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1f5fd248f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-js467 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1f5fd248f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-js467 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1f5fd248f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=50510 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-js467 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1f5fd248f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=92 identity=50510 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-js467 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f1f5fd248f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=92 identity=50510 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-js467 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1f5fd248f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=92 identity=50510 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-js467 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ea2ee0c49 endpointID=3300 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-82txh subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=5ea2ee0c49 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3300 identity=32429 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-82txh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 1d125c81-172d-42a6-b7df-a4be70ba994d default }" containerID=0d96b29ee0a1c586efc323ec2e23e7c4c2b94e0d545b8a3e3e683779f23033e2 datapathConfiguration="&{false false false false false }" interface=lxc3edcf88b7e6c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ll9lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d96b29ee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ll9lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d96b29ee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ll9lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d96b29ee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=15971 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ll9lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d96b29ee0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=15971 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ll9lx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 61d1833c-30b2-4779-b8f6-ab664f223fb1 default }" containerID=979256803ccb85d41dfef55697c4a93165bafa9aa582dddefdd7330d86e9696e datapathConfiguration="&{false false false false false }" interface=lxc55175d62cd19 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ml9nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=979256803c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ml9nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=979256803c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ml9nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=979256803c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identity=35548 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ml9nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=979256803c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2763 identity=35548 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ml9nw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d96b29ee0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=608 identity=15971 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ll9lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d96b29ee0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=608 identity=15971 ipv4=10.0.0.195 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ll9lx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.220 9c86cc83-3e9f-47dc-92dd-eed9759f45b5 default }" containerID=6694da415dc66a9888b2e757b0d6187f94463b5eed2f872ca54dd4bddcde8be9 datapathConfiguration="&{false false false false false }" interface=lxc32eb72b762b7 k8sPodName=cert-manager/cert-manager-75c4c745bc-9csdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6694da415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9csdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6694da415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9csdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6694da415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 identity=28039 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9csdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6694da415d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2288 identity=28039 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9csdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=979256803c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2763 identity=35548 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ml9nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=979256803c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2763 identity=35548 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ml9nw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6694da415d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2288 identity=28039 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9csdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6694da415d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2288 identity=28039 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9csdd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 af9cd85d-d849-46bc-beca-cf2d69779183 default }" containerID=7ed660232b9a7138e012c41708d1e80c833d60f6648b5db32d81e4507b8b2e26 datapathConfiguration="&{false false false false false }" interface=lxc264bc8ba24ee k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ed660232b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ed660232b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ed660232b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=17066 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ed660232b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=17066 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ed660232b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=463 identity=17066 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ed660232b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=463 identity=17066 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ed660232b endpointID=463 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mhfv6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=dcb2b66e-04bb-4805-a266-5f5254414e54 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=7ed660232b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=463 identity=17066 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mhfv6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 df13acc6-7895-47b3-a2cc-0fc8d1a9f2f2 default }" containerID=0547576a68e6c83f73f6b772df3907b62600ee390f3b0d7d43ca0ee52e1d528e datapathConfiguration="&{false false false false false }" interface=lxc4ec45ac9f95f k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0547576a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0547576a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0547576a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0547576a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=22843 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0547576a68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=22843 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0547576a68 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=16 identity=22843 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0547576a68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=22843 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0547576a68 endpointID=16 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-k8cjw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=73c8ac39-d64c-4b58-8c2f-e57e51fc3bf5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=0547576a68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=22843 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-k8cjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 f8e113ad-3e3d-46af-889d-1c7d4651c388 default }" containerID=cd2abcd8d3849bcbb6a670c9603116b4a29ed90736fc1b2f7b580250e1813491 datapathConfiguration="&{false false false false false }" interface=lxc9617620be6c3 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fst5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd2abcd8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fst5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd2abcd8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fst5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd2abcd8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=32634 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fst5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd2abcd8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=32634 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fst5f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd2abcd8d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2 identity=32634 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fst5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd2abcd8d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2 identity=32634 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fst5f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 169ec028-6ddc-46fd-a72a-625fb45e4a12 default }" containerID=51a5c718abdc96a8d781e71e759bc158b461a4bddbe0742a3cc045c84b3a9fc3 datapathConfiguration="&{false false false false false }" interface=lxcc60ac9f4b3f8 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51a5c718ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51a5c718ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51a5c718ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=44022 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51a5c718ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=44022 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51a5c718ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=185 identity=44022 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=51a5c718ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=185 identity=44022 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51a5c718ab endpointID=185 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-j2l9d subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3fa54029-9b2e-4cfa-8c5b-69b5bc6e8e4e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=51a5c718ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=185 identity=44022 ipv4=10.0.0.10 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j2l9d subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f722521e-9244-4a18-9016-4e806178ff07] Description:}]" policyAddRequest=b0af15b0-218e-4b70-9662-25e14438cdd6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b0af15b0-218e-4b70-9662-25e14438cdd6 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=90ecbb1e-b5d7-45fd-9b41-cf7c034b9970] Description:}]" policyAddRequest=37fa91c9-a200-4c43-87c6-9ff374961005 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=37fa91c9-a200-4c43-87c6-9ff374961005 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.205 5a72f1b8-1f08-4ecb-8193-1b3f7ea82dfb default }" containerID=fa03f568ffc591df97351a703b647d264d0245b6ff70d80dbea7940cf96a8b6b datapathConfiguration="&{false false false false false }" interface=lxc6a061fa37d18 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fx7j7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa03f568ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fx7j7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa03f568ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fx7j7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa03f568ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=51511 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fx7j7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa03f568ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=51511 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fx7j7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa03f568ff datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3703 identity=51511 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fx7j7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa03f568ff datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3703 identity=51511 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fx7j7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 768e510b-996d-4002-b5e4-ee06de85eb19 default }" containerID=ea0abc3a6bb5d259d9adcc81e0298b468880c4d84a3fc5b994edbc35d0e2c4b1 datapathConfiguration="&{false false false false false }" interface=lxc4deceeded01a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bddp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea0abc3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bddp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea0abc3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bddp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea0abc3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=3829 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bddp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea0abc3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=3829 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bddp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea0abc3a6b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1197 identity=3829 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bddp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea0abc3a6b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1197 identity=3829 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-bddp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 240b65f7-32a2-422f-bc6b-9d28a6f56519 default }" containerID=65646b6fe86da3dfec434735629bbd8d314ef867552445f1c71c27d02d48e7c1 datapathConfiguration="&{false false false false false }" interface=lxcbede3d1bd702 k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65646b6fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65646b6fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=65646b6fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65646b6fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 identity=9151 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65646b6fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3755 identity=9151 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65646b6fe8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3755 identity=9151 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=65646b6fe8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3755 identity=9151 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-rzf7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 996c9003-8849-4329-8dff-cb9e9cc534e2 default }" containerID=6699c813a2a5aa782b6a605941fdabec961b996e02ff942d0ddb06c081a25a86 datapathConfiguration="&{false false false false false }" interface=lxc5f3f0fd4102e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6699c813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6699c813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6699c813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=22221 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6699c813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=22221 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6699c813a2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1664 identity=22221 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6699c813a2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1664 identity=22221 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.61 2110b6df-09f3-45fc-8cfa-10ec70db81f9 default }" containerID=101b2434678f2c14875f8e9648a4d99c62a96924c2e02ef36d99e51a7464c0b7 datapathConfiguration="&{false false false false false }" interface=lxc386dc814df59 k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=101b243467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=101b243467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=101b243467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=101b243467 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=32567 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=101b243467 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1341 identity=32567 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 subsys=endpoint level=info msg="Successful endpoint creation" containerID=101b243467 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1341 identity=32567 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=101b243467 endpointID=1341 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=101b243467 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1341 identity=32567 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e86c16fa-dedd-4992-9bf3-8576e50c4392 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 169c061f-bab8-4e82-b438-6cfc0a8a79e4 default }" containerID=88bd03f7ff54177c85bec9c9ac8e72a876cbe6ec093d6115fd7831e4b4622e13 datapathConfiguration="&{false false false false false }" interface=lxcef2ebc7fcdbf k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88bd03f7ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88bd03f7ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=88bd03f7ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=35365 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88bd03f7ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3470 identity=35365 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88bd03f7ff datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3470 identity=35365 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88bd03f7ff datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3470 identity=35365 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=548652f5-dbed-4527-9d5c-36165fa65b6a] Description:}]" policyAddRequest=b702cc46-b1ae-426b-9555-81f1163522ff subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b702cc46-b1ae-426b-9555-81f1163522ff policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.75 6aa128b3-2cad-4930-9854-d3813f544a63 default }" containerID=fa27c2c5f9d66781a1f682ba02fbdb87afa802116642f0562e4f5e0515b60c1e datapathConfiguration="&{false false false false false }" interface=lxcc4e2df38acd4 k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa27c2c5f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa27c2c5f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa27c2c5f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa27c2c5f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=32567 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa27c2c5f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4 identity=32567 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa27c2c5f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4 identity=32567 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 subsys=daemon level=info msg="Delete endpoint request" containerID=fa27c2c5f9 endpointID=4 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fa27c2c5f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4 identity=32567 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4a65971-4999-44a4-bde3-a6ee22962a14 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 ca09ac1c-3d0e-4623-961d-0ed862aeb9ca default }" containerID=51ff8b0591e530389dcf7f5eef430b359c13c1f0fc7ff08607bbbf95d301a6f6 datapathConfiguration="&{false false false false false }" interface=lxc62faf1d9789c k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51ff8b0591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51ff8b0591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51ff8b0591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identity=43089 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51ff8b0591 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3762 identity=43089 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51ff8b0591 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3762 identity=43089 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51ff8b0591 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3762 identity=43089 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=88070d7e-8bb3-4b3b-a2c5-539991445087] Description:}]" policyAddRequest=d14a86db-b511-474d-b1af-d2d9508ed6a1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d14a86db-b511-474d-b1af-d2d9508ed6a1 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.219 596cedb3-2b5d-463e-8e99-9166c950081c default }" containerID=f5884a35cb64896451b243080cbee9fcd4cc559c3d1a44d4eb32cd9265780b1e datapathConfiguration="&{false false false false false }" interface=lxca11e21a13537 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5884a35cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5884a35cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f5884a35cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=38792 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5884a35cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=38792 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5884a35cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2292 identity=38792 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5884a35cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2292 identity=38792 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01041568033330177 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.5 2e13beb4-48cc-4d9d-bcd3-7382331df2f7 default }" containerID=5cd4baac25427a525410898b2960ac53bef7b08b55392727745d6d489ad489ef datapathConfiguration="&{false false false false false }" interface=lxcc0b36abbf364 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-268ck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cd4baac25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-268ck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cd4baac25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-268ck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cd4baac25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=29164 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-268ck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cd4baac25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=29164 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-268ck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cd4baac25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1225 identity=29164 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-268ck subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cd4baac25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1225 identity=29164 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-268ck subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 e5fb641c-144f-4ef1-96d8-c20a136c0c2a default }" containerID=db7efacac23f5f79c2ad78961403ea6c8bcc2a3c2c0388645fe5b518dbccb240 datapathConfiguration="&{false false false false false }" interface=lxce5c0388fd4e5 k8sPodName=monitoring/node-feature-discovery-worker-2xcmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db7efacac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2xcmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db7efacac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2xcmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.119 5fbe2c34-9323-4259-ab0f-2ba88eb20edb default }" containerID=4aa663975c60eedc461f72c3b7ae7ff68f38de17512e1558a1414217851986a9 datapathConfiguration="&{false false false false false }" interface=lxc090b705b36fa k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rr674 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4aa663975c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rr674 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4aa663975c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rr674 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=db7efacac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=7467 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2xcmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db7efacac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=7467 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2xcmv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4aa663975c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=54484 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rr674 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4aa663975c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=54484 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rr674 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db7efacac2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=457 identity=7467 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2xcmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=db7efacac2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=457 identity=7467 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-2xcmv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4aa663975c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=533 identity=54484 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rr674 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4aa663975c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=533 identity=54484 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rr674 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 daa67738-5dd5-42f5-9bf7-47d696169d5c default }" containerID=d1f4be1f11597d7fb2ced7caad2c7595a09799bd1a5c9a7fe51929eb05ab4c5b datapathConfiguration="&{false false false false false }" interface=lxc78bb28bf9630 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wmf5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1f4be1f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.227 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wmf5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1f4be1f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.227 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wmf5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1f4be1f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=58270 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.227 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wmf5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1f4be1f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=58270 ipv4=10.0.0.227 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wmf5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1f4be1f11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=462 identity=58270 ipv4=10.0.0.227 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wmf5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1f4be1f11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=58270 ipv4=10.0.0.227 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wmf5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1105 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01105 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01105 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01105 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01105:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1105 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 46c6f703-bd28-4931-a77b-9022a11a6f2c default }" containerID=1cba482e021c163914c6373cd6353599d40244255826a73bae721c704d014296 datapathConfiguration="&{false false false false false }" interface=lxcac0804d3a8d4 k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cba482e02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cba482e02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1cba482e02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cba482e02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=49003 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cba482e02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=49003 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cba482e02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=974 identity=49003 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cba482e02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=974 identity=49003 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1cba482e02 endpointID=974 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-kv24k subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a5a25d99-20b7-4738-8e89-ebf76703b8b7 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1cba482e02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=974 identity=49003 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kv24k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 6c7bcddf-a2fb-4141-90a8-3c7156db9e69 default }" containerID=cc7b78427243503f1c75bd5bf6e79d0c2eca836a2726832911a25b4a5b3607ab datapathConfiguration="&{false false false false false }" interface=lxcfd99ed5ca1ae k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5c8jn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc7b784272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5c8jn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc7b784272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5c8jn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc7b784272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=17035 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5c8jn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc7b784272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=17035 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5c8jn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 e183d462-7978-4e85-8544-40bcbd974236 default }" containerID=b9ef76f455a6a6edfa599283f0725fc64839f4410b7b3f66aa4083919bd5f81a datapathConfiguration="&{false false false false false }" interface=lxcb3a5b78b94c0 k8sPodName=monitoring/kube-prometheus-stack-grafana-5bb4cb48d9-wk5lg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9ef76f455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3406 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bb4cb48d9-wk5lg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9ef76f455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3406 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bb4cb48d9-wk5lg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.192 3b515390-ee54-427d-a673-a6ede3b91522 default }" containerID=d962f76a60402ab61e57170c81320a8ebda364c2ea8cf9009dc106c9fe7955ea datapathConfiguration="&{false false false false false }" interface=lxc1bbb086a0787 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lvl6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d962f76a60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lvl6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d962f76a60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lvl6n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9ef76f455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3406 identity=28388 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bb4cb48d9-wk5lg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9ef76f455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3406 identity=28388 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bb4cb48d9-wk5lg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d962f76a60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=14481 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lvl6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d962f76a60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=14481 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lvl6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc7b784272 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=17035 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5c8jn subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc7b784272 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=17035 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-5c8jn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d962f76a60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=397 identity=14481 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lvl6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=d962f76a60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=14481 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lvl6n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b9ef76f455 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3406 identity=28388 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bb4cb48d9-wk5lg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9ef76f455 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3406 identity=28388 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bb4cb48d9-wk5lg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 572d069a-283a-4216-827f-aa1da2646206 default }" containerID=0300a7043230cfbc9486f932ac3d3e9756905b6ca8ca91232d143ae9e9894037 datapathConfiguration="&{false false false false false }" interface=lxc7ee09b61849f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0300a70432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0300a70432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0300a70432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=3306 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0300a70432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1594 identity=3306 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0300a70432 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1594 identity=3306 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0300a70432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1594 identity=3306 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 a8d41f93-7fad-42a0-b769-983e432a8a8e default }" containerID=2b8d754808c55ebb5dba2e903eae6370e13063764d92eb9efefb8909a02cf74a datapathConfiguration="&{false false false false false }" interface=lxc76b1f8632082 k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b8d754808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b8d754808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b8d754808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b8d754808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=32567 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 81a6fb8a-fa14-488a-bbb4-283b0ac2a99a default }" containerID=0326da4ac482c6801714e2d7517012153949c3104a30a200f878c5a162eecc10 datapathConfiguration="&{false false false false false }" interface=lxc5179535559d4 k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0326da4ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0326da4ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0326da4ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0326da4ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=32567 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b8d754808 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2976 identity=32567 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b8d754808 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2976 identity=32567 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0326da4ac4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3993 identity=32567 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0326da4ac4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3993 identity=32567 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 subsys=daemon level=info msg="Delete endpoint request" containerID=0300a70432 endpointID=1594 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-vrjr8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=845d49ab-251c-44ba-bf78-ca04e1870476 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0300a70432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1594 identity=3306 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-vrjr8 subsys=endpoint level=info msg="Delete endpoint request" containerID=0326da4ac4 endpointID=3993 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=2b8d754808 endpointID=2976 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0326da4ac4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3993 identity=32567 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6ec513c6-2525-4ffd-985f-21985dbc0a26 subsys=endpoint level=info msg="Removed endpoint" containerID=2b8d754808 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2976 identity=32567 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26fbd418-465b-4d1c-94a8-88ff1b5504f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 a676661f-927a-473c-a7d6-16040abbfcb0 default }" containerID=5f6a220030c3bdf84e29b9cfc5e854d2183c60f46f3ee2ae830f7fda5bdb2c39 datapathConfiguration="&{false false false false false }" interface=lxc4ffe97f911e2 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f6a220030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1399 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f6a220030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1399 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f6a220030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1399 identity=374 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f6a220030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1399 identity=374 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5f6a220030 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1399 identity=374 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f6a220030 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1399 identity=374 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 71dd9b0f-98d9-4e00-804e-944955fd0f52 default }" containerID=4f07d0c8a47398c0b821aabca16434f6fb40010098da150f39d271ddf2cbaad8 datapathConfiguration="&{false false false false false }" interface=lxc70e19f3e5491 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f07d0c8a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f07d0c8a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f07d0c8a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=60442 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f07d0c8a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=60442 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f07d0c8a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=599 identity=60442 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f07d0c8a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=599 identity=60442 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 ea5c9c56-446f-43d9-93d6-978726630818 default }" containerID=9fe139c364ed4e2fe2ad2313dc3d73e65b4f7b49a65103ddf6ccccfd228d68f8 datapathConfiguration="&{false false false false false }" interface=lxce374cfc4b299 k8sPodName=monitoring/loki-gateway-cf54cb88c-d4v98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fe139c364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-d4v98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fe139c364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-d4v98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fe139c364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=8466 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-d4v98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fe139c364 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3389 identity=8466 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-d4v98 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.215 c3e6b4c3-8909-4942-af06-c0395e4ecec2 default }" containerID=77f9471d78fc21737f8252d54ffc8a69867c599e0cc6e595664f41310dd1a94e datapathConfiguration="&{false false false false false }" interface=lxca4e132ec0245 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77f9471d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77f9471d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77f9471d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 identity=5762 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77f9471d78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 identity=5762 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fe139c364 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3389 identity=8466 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-d4v98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fe139c364 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3389 identity=8466 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-d4v98 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 86d71964-face-460b-bf99-0867992c0e97 default }" containerID=11429d03a74646f41a9d17f617ad97db58d293d80d03c7c081a7ec71ba78a7e9 datapathConfiguration="&{false false false false false }" interface=lxc67919cc795d7 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11429d03a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11429d03a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11429d03a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identity=3920 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11429d03a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identity=3920 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77f9471d78 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3251 identity=5762 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77f9471d78 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3251 identity=5762 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=11429d03a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2555 identity=3920 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11429d03a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2555 identity=3920 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 e1091dfc-b402-4e1c-8dc2-f5a571e6d50c default }" containerID=656f892aeb9d7c889cb41d7c43e80bdc2c5c5a7870a995f66e7211c65c5d54e1 datapathConfiguration="&{false false false false false }" interface=lxce53c736e5703 k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=656f892aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=656f892aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=656f892aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=656f892aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=85 identity=32567 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=656f892aeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=85 identity=32567 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 subsys=endpoint level=info msg="Successful endpoint creation" containerID=656f892aeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=85 identity=32567 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 1a7dd02f-34f7-483e-8a07-0246067cb4fc default }" containerID=825e5ff4db9854547eeee6d77019d3e9567483e664d6bcbb440080bb945596b5 datapathConfiguration="&{false false false false false }" interface=lxc9364ad042d8c k8sPodName=monitoring/vector-6dnbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=825e5ff4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-6dnbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=825e5ff4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-6dnbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=825e5ff4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=829 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-6dnbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=825e5ff4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=829 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-6dnbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=825e5ff4db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=808 identity=829 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-6dnbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=825e5ff4db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=829 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/vector-6dnbx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=656f892aeb endpointID=85 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=656f892aeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=85 identity=32567 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33e07d19-23f8-46ce-90e3-692386aa4210 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 00399e38-db44-46f6-89b1-ad29917a4387 default }" containerID=be91ad1929e99945fbd21fb04a76c2cf3bea5a17cc3e48c5da010de842f4d2a1 datapathConfiguration="&{false false false false false }" interface=lxcfc9547fff306 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be91ad1929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be91ad1929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be91ad1929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=13970 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be91ad1929 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=13970 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=be91ad1929 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=523 identity=13970 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be91ad1929 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=13970 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 ec32fb02-f785-4ee6-bf12-ec8c462b18dc default }" containerID=cf95b246107cf0c2060e76ab1fd1d640bd380b34ee314060edb3fb7e1e58f163 datapathConfiguration="&{false false false false false }" interface=lxc6ddde8eafd85 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-l4gk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf95b24610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-l4gk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf95b24610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-l4gk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf95b24610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=1906 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-l4gk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf95b24610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=1906 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-l4gk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf95b24610 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=137 identity=1906 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-l4gk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf95b24610 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=1906 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-l4gk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 f602cebf-749f-4836-b7fc-82ebf1bda572 default }" containerID=c5bd89548fa0a80df1bf5fe89feecd4bf5c6067343a6805981116811e8d2ee3f datapathConfiguration="&{false false false false false }" interface=lxc751f24427933 k8sPodName=openstack/memcached-memcached-6479589586-k2khf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5bd89548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k2khf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5bd89548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k2khf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5bd89548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=34861 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k2khf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5bd89548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=34861 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k2khf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c5bd89548f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=134 identity=34861 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k2khf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5bd89548f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=34861 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-k2khf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 903a0d25-252f-4916-8b26-08f8bb633f2d default }" containerID=76372a592cfc1ef922c3f99e2d1d162366bd7eaa6912ca8c0647f6e066a74ebb datapathConfiguration="&{false false false false false }" interface=lxc9b099119d0e3 k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76372a592c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76372a592c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76372a592c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76372a592c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1031 identity=32567 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76372a592c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1031 identity=32567 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76372a592c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=32567 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 subsys=daemon level=info msg="Delete endpoint request" containerID=76372a592c endpointID=1031 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=76372a592c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1031 identity=32567 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ca1d92-1214-41d0-938e-a7ce902edbc7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 20493d08-b6e8-4723-ab32-39908987615e default }" containerID=5e45eac799c1f4aa93d33ccbc21ae427e9c4891b4f85f5a3802650ff5110a458 datapathConfiguration="&{false false false false false }" interface=lxcda8ec3c00449 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e45eac799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e45eac799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e45eac799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=3643 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5e45eac799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=3643 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e45eac799 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=434 identity=3643 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e45eac799 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=434 identity=3643 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.153 6c7e2a40-f4be-472d-bf2b-0c134772be10 default }" containerID=ec1f3d5adc80b0c3d3a16e1eafa5171ce7e4a6e14ed661c1ae2837f3b1464331 datapathConfiguration="&{false false false false false }" interface=lxc9b7e6ff84683 k8sPodName=openstack/keystone-api-7d694dfccd-8hwpt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec1f3d5adc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-api-7d694dfccd-8hwpt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec1f3d5adc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-api-7d694dfccd-8hwpt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec1f3d5adc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=42753 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-api-7d694dfccd-8hwpt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ec1f3d5adc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=42753 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-api-7d694dfccd-8hwpt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 1c72dc50-6799-48bd-af6f-47739717ebf1 default }" containerID=f82d25e45e3ed6c895fbb121b95d6f16088867195d560b05dc1f9e6d642793b1 datapathConfiguration="&{false false false false false }" interface=lxca05c03a02597 k8sPodName=openstack/keystone-credential-setup-wvstt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f82d25e45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-credential-setup-wvstt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f82d25e45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-credential-setup-wvstt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f82d25e45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=22703 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-credential-setup-wvstt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f82d25e45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=22703 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-credential-setup-wvstt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec1f3d5adc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=617 identity=42753 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-api-7d694dfccd-8hwpt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec1f3d5adc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=617 identity=42753 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-api-7d694dfccd-8hwpt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f82d25e45e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1763 identity=22703 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-credential-setup-wvstt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f82d25e45e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1763 identity=22703 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-credential-setup-wvstt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f82d25e45e endpointID=1763 k8sNamespace=openstack k8sPodName=keystone-credential-setup-wvstt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6f32eae4-e632-4a40-afaf-3417281513b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f82d25e45e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1763 identity=22703 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-credential-setup-wvstt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 662ae0f1-b825-495d-aca6-b8bc6097c92a default }" containerID=4ff84215cce81e8c905d76a7346378b06b1cce41de50b4d616931019f5378b6b datapathConfiguration="&{false false false false false }" interface=lxcc0d2d7a44bd3 k8sPodName=openstack/keystone-db-init-vqtj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ff84215cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-init-vqtj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ff84215cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-init-vqtj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ff84215cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=12407 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-init-vqtj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ff84215cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=12407 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-init-vqtj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ff84215cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=359 identity=12407 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-init-vqtj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ff84215cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=12407 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-init-vqtj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4ff84215cc endpointID=359 k8sNamespace=openstack k8sPodName=keystone-db-init-vqtj5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=65a5f71d-d083-4a08-a75c-a30a56dc8832 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4ff84215cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=359 identity=12407 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-init-vqtj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 d8c8071d-8401-4a87-af2b-6d69fe6bb943 default }" containerID=caf7a987471a219b4ffb9da96a6d66e3805ef0ced9cd29d4f951245fbf831bb4 datapathConfiguration="&{false false false false false }" interface=lxc4f5d5db3caf9 k8sPodName=openstack/keystone-fernet-setup-kwpkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caf7a98747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-fernet-setup-kwpkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caf7a98747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-fernet-setup-kwpkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=caf7a98747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=22293 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-fernet-setup-kwpkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caf7a98747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=22293 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-fernet-setup-kwpkq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caf7a98747 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=163 identity=22293 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-fernet-setup-kwpkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=caf7a98747 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=22293 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-fernet-setup-kwpkq subsys=daemon level=info msg="Delete endpoint request" containerID=caf7a98747 endpointID=163 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-kwpkq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=2a02f989-1f4d-4b65-aa4e-3cd0604855a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=caf7a98747 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=22293 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-fernet-setup-kwpkq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 25953deb-7c04-4416-a721-fbe0830a6d53 default }" containerID=d53e54aeb38999590fcf41dec6b0b78b8dff5b3157532c2fdf71ebc4ef4b97b6 datapathConfiguration="&{false false false false false }" interface=lxc97a676b0c6db k8sPodName=openstack/keystone-db-sync-mchnq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d53e54aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d53e54aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d53e54aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d53e54aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=25088 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d53e54aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=25088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d53e54aeb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1227 identity=25088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq subsys=endpoint level=info msg="Successful endpoint creation" containerID=d53e54aeb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=25088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d53e54aeb3 endpointID=1227 k8sNamespace=openstack k8sPodName=keystone-db-sync-mchnq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=a25c369f-b7cc-4899-a4b8-4f175b571b55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d53e54aeb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=25088 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-mchnq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 e11b48aa-2cd1-47f0-860c-fe4402adf543 default }" containerID=b78e303ff0f80651bda6830d2e847ae6fcef7fe4dd07e7c05be26168c15145d4 datapathConfiguration="&{false false false false false }" interface=lxcd40c70ca787f k8sPodName=openstack/keystone-rabbit-init-btzc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b78e303ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b78e303ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b78e303ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b78e303ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=14602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b78e303ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=14602 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b78e303ff0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=80 identity=14602 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b78e303ff0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=14602 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b78e303ff0 endpointID=80 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-btzc2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3df57679-74cb-40b2-80c6-24c5dbf981e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b78e303ff0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=14602 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-rabbit-init-btzc2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 30b665ad-0b56-4480-b053-a74d5becb225 default }" containerID=00ce3ca138c569b14af276ef538f67e942af701c50023602a583b413bdc579b5 datapathConfiguration="&{false false false false false }" interface=lxc2f614b97a846 k8sPodName=openstack/keystone-domain-manage-6gjnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00ce3ca138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-domain-manage-6gjnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00ce3ca138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-domain-manage-6gjnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00ce3ca138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identity=3620 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-domain-manage-6gjnf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=00ce3ca138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identity=3620 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-domain-manage-6gjnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00ce3ca138 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2244 identity=3620 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-domain-manage-6gjnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=00ce3ca138 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2244 identity=3620 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-domain-manage-6gjnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00ce3ca138 endpointID=2244 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6gjnf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=4b664433-0745-47c1-8f0b-ed79df39839b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=00ce3ca138 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2244 identity=3620 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-domain-manage-6gjnf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 14314c41-2f41-43b0-ba66-1b261ad6b640 default }" containerID=564c6d5ac50ff620a2a1500db27aa41c9774609af0314f199049d3d0ac4d6a1c datapathConfiguration="&{false false false false false }" interface=lxc2c370338caf1 k8sPodName=openstack/keystone-bootstrap-hsws4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=564c6d5ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-bootstrap-hsws4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=564c6d5ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-bootstrap-hsws4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=564c6d5ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=49184 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-bootstrap-hsws4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=564c6d5ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=49184 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-bootstrap-hsws4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=564c6d5ac5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3567 identity=49184 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-bootstrap-hsws4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=564c6d5ac5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3567 identity=49184 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-bootstrap-hsws4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=564c6d5ac5 endpointID=3567 k8sNamespace=openstack k8sPodName=keystone-bootstrap-hsws4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=34d56425-7dd5-487c-b835-c9322a8af8f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=564c6d5ac5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3567 identity=49184 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-bootstrap-hsws4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 629217f1-3874-43d3-825f-b8b429936e0b default }" containerID=06fe70b303b5651e8e80d85c516257c3b0f8774d1678fa7cca7d858a610eae00 datapathConfiguration="&{false false false false false }" interface=lxc305296691f6a k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06fe70b303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06fe70b303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06fe70b303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06fe70b303 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=32567 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06fe70b303 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1855 identity=32567 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06fe70b303 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1855 identity=32567 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 subsys=daemon level=info msg="Delete endpoint request" containerID=06fe70b303 endpointID=1855 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=06fe70b303 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1855 identity=32567 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7cc8ff9a-58da-43fe-a2c1-7d0647680d21 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 c7e10239-0735-4720-897d-f1d16b326c93 default }" containerID=665736454c743aa086bc0240bd8ab2ae13a5c0c725e1dc0b792f3567ec82a3c3 datapathConfiguration="&{false false false false false }" interface=lxcc8d9300a3b26 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=665736454c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=665736454c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=665736454c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 identity=45074 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=665736454c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2713 identity=45074 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=665736454c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2713 identity=45074 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=665736454c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2713 identity=45074 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 33c5d822-fba4-49c5-8fa0-ed7dfcf86612 default }" containerID=5d990e501baadc4be301b9a00a14ab5c435b81193bacf3f83fa3e031efba0547 datapathConfiguration="&{false false false false false }" interface=lxc4f97accae79c k8sPodName=openstack/barbican-api-5d5f744d94-sqcc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d990e501b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-5d5f744d94-sqcc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d990e501b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-5d5f744d94-sqcc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d990e501b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=50996 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-5d5f744d94-sqcc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d990e501b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3430 identity=50996 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-5d5f744d94-sqcc5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 c29fb5ae-08c3-4482-aed4-06edcc11a848 default }" containerID=2b1258682b2624d6a82c7497b1e0f7ac248513a0f653977fbb0f0bf0c03e2d10 datapathConfiguration="&{false false false false false }" interface=lxc592330120892 k8sPodName=openstack/barbican-db-init-vskvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b1258682b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-init-vskvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b1258682b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-init-vskvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b1258682b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=43615 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-init-vskvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b1258682b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=43615 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-init-vskvc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d990e501b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3430 identity=50996 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-5d5f744d94-sqcc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d990e501b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3430 identity=50996 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-5d5f744d94-sqcc5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b1258682b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=534 identity=43615 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-init-vskvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b1258682b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=534 identity=43615 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-init-vskvc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b1258682b endpointID=534 k8sNamespace=openstack k8sPodName=barbican-db-init-vskvc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=13976e5f-86b2-43be-84fd-d92979e0932b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2b1258682b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=534 identity=43615 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/barbican-db-init-vskvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 bec1f4e4-384a-40b8-9050-9b3532e0a1fe default }" containerID=b847e0e66c2962215407dc0b00f05cab7da7e91d7d9460b35f3d3303eb80eeb5 datapathConfiguration="&{false false false false false }" interface=lxcbffaf6d3c333 k8sPodName=openstack/barbican-db-sync-j7ccs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b847e0e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-j7ccs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b847e0e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-j7ccs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b847e0e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=6545 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-j7ccs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b847e0e66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=6545 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-j7ccs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b847e0e66c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1582 identity=6545 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-j7ccs subsys=endpoint level=info msg="Successful endpoint creation" containerID=b847e0e66c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1582 identity=6545 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-j7ccs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b847e0e66c endpointID=1582 k8sNamespace=openstack k8sPodName=barbican-db-sync-j7ccs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=0f8a711e-dac2-4fab-9a8c-4596dfea6a08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b847e0e66c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1582 identity=6545 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-j7ccs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 8993d410-f834-4dc1-a851-2786ed10dfbc default }" containerID=a2ed972102e9db78f63587f76eaebd71cedf69b8fd924e95eca0933b6b5b70fc datapathConfiguration="&{false false false false false }" interface=lxcc1c4427b9585 k8sPodName=openstack/barbican-rabbit-init-8qg5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2ed972102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-8qg5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2ed972102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-8qg5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2ed972102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identity=61739 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-8qg5z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a2ed972102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identity=61739 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-8qg5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2ed972102 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2720 identity=61739 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-8qg5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2ed972102 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2720 identity=61739 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-8qg5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036123473155951144 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=a2ed972102 endpointID=2720 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-8qg5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f549593b-556a-4c86-a5f2-1a1244c8cc51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a2ed972102 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2720 identity=61739 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/barbican-rabbit-init-8qg5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 e4239931-4e05-4564-9a6d-fdc9b323d1be default }" containerID=feab51e725267bacf925f19ec9e707b4360877e7474bc8636a422f53656816c5 datapathConfiguration="&{false false false false false }" interface=lxc24ba793c52d7 k8sPodName=openstack/barbican-ks-service-ns5gz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feab51e725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-ns5gz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feab51e725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-ns5gz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feab51e725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=654 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-ns5gz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=feab51e725 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=611 identity=654 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-ns5gz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=feab51e725 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=611 identity=654 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-ns5gz subsys=endpoint level=info msg="Successful endpoint creation" containerID=feab51e725 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=611 identity=654 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-ns5gz subsys=daemon level=info msg="Delete endpoint request" containerID=feab51e725 endpointID=611 k8sNamespace=openstack k8sPodName=barbican-ks-service-ns5gz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=df32ead9-02c3-4ac1-af0f-5f32f2049a2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=feab51e725 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=611 identity=654 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-ns5gz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 5530cd40-8e2a-4c1d-83cc-5c3ca2becd08 default }" containerID=7983bb7d48a01996c320b554968ffd74042630ce24fd8b2d0b8838fa9304c9c7 datapathConfiguration="&{false false false false false }" interface=lxc62cd9597460e k8sPodName=openstack/barbican-ks-endpoints-ng6b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7983bb7d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ng6b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7983bb7d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ng6b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7983bb7d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=40637 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ng6b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7983bb7d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=40637 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ng6b2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7983bb7d48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1845 identity=40637 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ng6b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7983bb7d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1845 identity=40637 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ng6b2 subsys=daemon level=info msg="Delete endpoint request" containerID=7983bb7d48 endpointID=1845 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-ng6b2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=dc4cf930-e443-49ff-beac-d2a73a5091a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7983bb7d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1845 identity=40637 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ng6b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 f28a1ef2-a964-4a62-a8f4-276501051fe8 default }" containerID=1cd3dc2c94fc0b806f6baf542cb3fdc71752a81afee956c3f43ff2e59e8d9477 datapathConfiguration="&{false false false false false }" interface=lxcee9ea2b98f37 k8sPodName=openstack/barbican-ks-user-slqf5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cd3dc2c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-slqf5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cd3dc2c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-slqf5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cd3dc2c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=44299 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-slqf5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cd3dc2c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=44299 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-slqf5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1cd3dc2c94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=246 identity=44299 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-slqf5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cd3dc2c94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=246 identity=44299 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-slqf5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1cd3dc2c94 endpointID=246 k8sNamespace=openstack k8sPodName=barbican-ks-user-slqf5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=c01eb3a6-fec0-4d06-be35-7e75b70c1ade k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1cd3dc2c94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=246 identity=44299 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/barbican-ks-user-slqf5 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.140 2f5e277d-fd9b-4919-9eca-d8175757c628 default }" containerID=453aea4d71d86c328556ed00f3002a1f5ed5aa420ee23b75ca7aaebf8aa55861 datapathConfiguration="&{false false false false false }" interface=lxc210d6d13f61b k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cx9zq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=453aea4d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 ipv4=10.0.0.140 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cx9zq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=453aea4d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.140 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cx9zq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=453aea4d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=36716 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.140 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cx9zq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=453aea4d71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=36716 ipv4=10.0.0.140 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cx9zq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=453aea4d71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=693 identity=36716 ipv4=10.0.0.140 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cx9zq subsys=endpoint level=info msg="Successful endpoint creation" containerID=453aea4d71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=693 identity=36716 ipv4=10.0.0.140 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-cx9zq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 6386d099-abd5-45e5-ac88-8cfd8ad314a0 default }" containerID=e535db040734b6e2c3f7f9c70997888dcfda6ea66269a702fa6aa07682497eaf datapathConfiguration="&{false false false false false }" interface=lxceb7e09786000 k8sPodName=openstack/rook-ceph-detect-version-m8nrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e535db0407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m8nrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e535db0407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m8nrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e535db0407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=29014 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m8nrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e535db0407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=29014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m8nrd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e535db0407 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=801 identity=29014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m8nrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e535db0407 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=801 identity=29014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m8nrd subsys=daemon level=info msg="Delete endpoint request" containerID=e535db0407 endpointID=801 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-m8nrd subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=101d84a3-c72a-4b4e-a6d8-d3a161025d82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e535db0407 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=801 identity=29014 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-m8nrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 1d60731f-8af8-4a32-a536-50cf77952161 default }" containerID=fa1c992fff3050efe9a7ccdab04d08fd5f0d011af98bdbe382147f1feab5ae07 datapathConfiguration="&{false false false false false }" interface=lxc5ed22d1d012e k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa1c992fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa1c992fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa1c992fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=9729 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa1c992fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=9729 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa1c992fff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4025 identity=9729 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa1c992fff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4025 identity=9729 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa1c992fff endpointID=4025 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-6cp2q subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a83f15bd-4986-4bd9-92b7-c1d55cdccac7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=fa1c992fff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4025 identity=9729 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6cp2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 4e533033-ce2f-4184-b48c-2260894397c5 default }" containerID=d37bcd0aafc3213adf4e44ba0b275b83dd5c877fbb469f8a3166e900d07cfbac datapathConfiguration="&{false false false false false }" interface=lxc68bc8cec0e73 k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d37bcd0aaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d37bcd0aaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d37bcd0aaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=32567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d37bcd0aaf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=32567 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d37bcd0aaf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2787 identity=32567 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d37bcd0aaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=32567 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 subsys=daemon level=info msg="Delete endpoint request" containerID=d37bcd0aaf endpointID=2787 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d37bcd0aaf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=32567 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-82fd3c37-76ee-41d0-85a2-7ca3312777e9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 3ccab492-dc40-4006-b969-878d0185c3f7 default }" containerID=9617e722fb38fd652badb25ebaf8622ff8f45928c896697719f657a7cb46d277 datapathConfiguration="&{false false false false false }" interface=lxcaf8075f6d82b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9617e722fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9617e722fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9617e722fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identity=27643 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9617e722fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3791 identity=27643 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9617e722fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3791 identity=27643 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9617e722fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3791 identity=27643 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 3434efa9-ccf1-4758-b6ff-09592a6653e8 default }" containerID=19eef5c79f15f2f18cbcb83c998506c5be5c8ad2cf913570622fa582af65c01c datapathConfiguration="&{false false false false false }" interface=lxcee6763cff2a0 k8sPodName=openstack/glance-db-init-tkq75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19eef5c79f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-init-tkq75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19eef5c79f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-init-tkq75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19eef5c79f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=7136 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-init-tkq75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19eef5c79f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=7136 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-init-tkq75 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19eef5c79f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=149 identity=7136 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-init-tkq75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19eef5c79f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=7136 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-init-tkq75 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19eef5c79f endpointID=149 k8sNamespace=openstack k8sPodName=glance-db-init-tkq75 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=1ee51e14-6d71-4b21-a949-d6e1120adc26 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=19eef5c79f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=7136 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-init-tkq75 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 95989fb7-b5a9-44e8-be2a-413c9e11fd82 default }" containerID=0d02826ba5d6091bf1198684c0fd9594a716f22f8b4b9f2c5111e5009fda6596 datapathConfiguration="&{false false false false false }" interface=lxc95d2a9606ce6 k8sPodName=openstack/glance-db-sync-4wrwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d02826ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-db-sync-4wrwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d02826ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-db-sync-4wrwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d02826ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=6219 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-db-sync-4wrwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d02826ba5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=6219 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-db-sync-4wrwm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0d02826ba5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=837 identity=6219 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-db-sync-4wrwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d02826ba5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=6219 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-db-sync-4wrwm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.187 8e980d94-cf28-49fd-8c8a-f7d04646b59e default }" containerID=59df31bd2f757e2e27d5d684394d911fea4950a5e2124ee0cbddecbd54575bf3 datapathConfiguration="&{false false false false false }" interface=lxcd48e6457cc49 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59df31bd2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59df31bd2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=59df31bd2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=59df31bd2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=19388 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59df31bd2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=19388 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 30b48c49-9216-4e11-a34c-1657a28c8141 default }" containerID=7e5a49f6a98235cec4cabd9daf7a1c65302e2205a9c7a44b96dc246652169003 datapathConfiguration="&{false false false false false }" interface=lxc021d7f58f4b9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6qhc2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e5a49f6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6qhc2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e5a49f6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6qhc2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e5a49f6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=524 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6qhc2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e5a49f6a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=524 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6qhc2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59df31bd2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3797 identity=19388 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59df31bd2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3797 identity=19388 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2khk8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7e5a49f6a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=51 identity=524 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6qhc2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e5a49f6a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=51 identity=524 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6qhc2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d02826ba5 endpointID=837 k8sNamespace=openstack k8sPodName=glance-db-sync-4wrwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c3dffb9e-425f-4d35-a011-a390617427a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0d02826ba5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=6219 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-db-sync-4wrwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 be14ac32-84e1-4596-8380-035b7522988c default }" containerID=3098dedce9368a918f7ba9f38a6614b094fa1560d8d18664b7422b339462b6ce datapathConfiguration="&{false false false false false }" interface=lxc797c7c1eb224 k8sPodName=openstack/glance-rabbit-init-lvbqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3098dedce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-lvbqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3098dedce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-lvbqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3098dedce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=26390 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-lvbqf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3098dedce9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=26390 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-lvbqf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3098dedce9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=803 identity=26390 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-lvbqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3098dedce9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=26390 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-lvbqf subsys=daemon level=info msg="Delete endpoint request" containerID=3098dedce9 endpointID=803 k8sNamespace=openstack k8sPodName=glance-rabbit-init-lvbqf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1728071a-54dc-4b1f-ae34-e4ef42d01b2c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3098dedce9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=26390 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-rabbit-init-lvbqf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 fb0a14c4-4372-4d37-bdde-1862733d8306 default }" containerID=bea28a31e3a77c0d4265bbd94b2f79b3f142baf880e212716e2695c25ae37601 datapathConfiguration="&{false false false false false }" interface=lxcf59d596bee49 k8sPodName=openstack/glance-ks-service-j58g7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bea28a31e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bea28a31e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bea28a31e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bea28a31e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=49552 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bea28a31e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=49552 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bea28a31e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=195 identity=49552 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bea28a31e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=195 identity=49552 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bea28a31e3 endpointID=195 k8sNamespace=openstack k8sPodName=glance-ks-service-j58g7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b03f1c45-5a71-4dfd-a453-c8a7233456e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bea28a31e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=195 identity=49552 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-j58g7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 211245db-5abb-4973-857e-dc81dce60efe default }" containerID=79910915a4b8aa0c4aca7821d27c29c3670279d05e80ca67e767909fa716a839 datapathConfiguration="&{false false false false false }" interface=lxc8e6643ad01fa k8sPodName=openstack/glance-ks-endpoints-x9wqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79910915a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-endpoints-x9wqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79910915a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-endpoints-x9wqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79910915a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=43968 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-endpoints-x9wqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79910915a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=996 identity=43968 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-endpoints-x9wqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79910915a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=996 identity=43968 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-endpoints-x9wqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=79910915a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=996 identity=43968 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-endpoints-x9wqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79910915a4 endpointID=996 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-x9wqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=15461ba4-f0b9-4793-8ce3-e122c1c6b648 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=79910915a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=996 identity=43968 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-ks-endpoints-x9wqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 4e5a7fcb-772c-40fd-b7f3-ffb36fd8fa8e default }" containerID=89a23ec9a7aa20bbd1db13f16b25d5cd57f7919bb44a94e069b92804f60d78ce datapathConfiguration="&{false false false false false }" interface=lxcd9e873e5185e k8sPodName=openstack/glance-ks-user-84v5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89a23ec9a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-84v5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89a23ec9a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e524a637-4750-475d-809d-1103de30ff6c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e524a637-4750-475d-809d-1103de30ff6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-84v5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e524a637-4750-475d-809d-1103de30ff6c;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e524a637-4750-475d-809d-1103de30ff6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89a23ec9a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=2396 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e524a637-4750-475d-809d-1103de30ff6c,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e524a637-4750-475d-809d-1103de30ff6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-84v5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89a23ec9a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=2396 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-84v5b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=89a23ec9a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1436 identity=2396 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-84v5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=89a23ec9a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1436 identity=2396 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-84v5b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89a23ec9a7 endpointID=1436 k8sNamespace=openstack k8sPodName=glance-ks-user-84v5b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e524a637-4750-475d-809d-1103de30ff6c k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e524a637-4750-475d-809d-1103de30ff6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=89a23ec9a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1436 identity=2396 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-84v5b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 e6d22c81-1d97-40c7-9db8-6334a57de5ed default }" containerID=8e664ad6f1e6eeaf18800ffa0881d22ddfbba2a83e72b14a37a0d8e2201acc3b datapathConfiguration="&{false false false false false }" interface=lxcc60a6d6414d4 k8sPodName=openstack/glance-metadefs-load-l8tjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e664ad6f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-l8tjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e664ad6f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-l8tjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e664ad6f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identity=3758 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-l8tjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e664ad6f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4041 identity=3758 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-l8tjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e664ad6f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4041 identity=3758 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-l8tjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e664ad6f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4041 identity=3758 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-l8tjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e664ad6f1 endpointID=4041 k8sNamespace=openstack k8sPodName=glance-metadefs-load-l8tjj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=49fb1b27-d795-4205-a5f7-b4094b687c71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e664ad6f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4041 identity=3758 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-metadefs-load-l8tjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 fe6c8fc9-54a0-4ee3-aca3-70f7639bcfc8 default }" containerID=4aa0bc0a705ad25157dfb0fb1486672800c5f1c2d24dabf2171f82450e5da4e3 datapathConfiguration="&{false false false false false }" interface=lxc2046a581d53e k8sPodName=openstack/glance-storage-init-vmz8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4aa0bc0a70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-storage-init-vmz8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4aa0bc0a70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-storage-init-vmz8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4aa0bc0a70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=5071 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-storage-init-vmz8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4aa0bc0a70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=5071 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-storage-init-vmz8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4aa0bc0a70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1456 identity=5071 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-storage-init-vmz8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=4aa0bc0a70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1456 identity=5071 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-storage-init-vmz8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4aa0bc0a70 endpointID=1456 k8sNamespace=openstack k8sPodName=glance-storage-init-vmz8z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e131513a-db96-4f60-81e3-3021334a8fd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4aa0bc0a70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1456 identity=5071 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-storage-init-vmz8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 aa31133c-41b9-4eaa-8485-4342cd5094a7 default }" containerID=bb2fd65ba2c814ac31a054e59421df9fdb4b709ef9cfb50765bda72717467bcc datapathConfiguration="&{false false false false false }" interface=lxc641cc056b227 k8sPodName=openstack/glance-api-7947dfff8d-c974w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb2fd65ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-api-7947dfff8d-c974w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb2fd65ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-api-7947dfff8d-c974w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb2fd65ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=3793 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-api-7947dfff8d-c974w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb2fd65ba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=3793 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-api-7947dfff8d-c974w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb2fd65ba2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=898 identity=3793 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-api-7947dfff8d-c974w subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb2fd65ba2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=898 identity=3793 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-api-7947dfff8d-c974w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.41 a543bbe9-42ce-481f-a3ae-28af206b570f default }" containerID=553c4ea2f879b3c2d671eec71e7c4bc387d66530b2e44ec90834c58d875d18ac datapathConfiguration="&{false false false false false }" interface=lxcd22e3d5f3a22 k8sPodName=openstack/staffeln-db-init-8z55q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=553c4ea2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-init-8z55q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=553c4ea2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-init-8z55q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=553c4ea2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=51687 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-init-8z55q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=553c4ea2f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=51687 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-init-8z55q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=553c4ea2f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1926 identity=51687 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-init-8z55q subsys=endpoint level=info msg="Successful endpoint creation" containerID=553c4ea2f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1926 identity=51687 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-init-8z55q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 72336e64-7efb-43f3-b4d2-b1770667c69f default }" containerID=d8c28e00c08608b9e38ed7752f564b33a81779b1da93905cf63efd2851733d74 datapathConfiguration="&{false false false false false }" interface=lxc34ed063826cd k8sPodName=openstack/staffeln-api-f8dd5b686-brtcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8c28e00c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-f8dd5b686-brtcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8c28e00c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-f8dd5b686-brtcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.197 95e63540-e326-45df-b763-a91381cbff26 default }" containerID=61eb58f12786fee3fb52d9bbd5a7574150d595e6ee59d12c6540c8c64837be3b datapathConfiguration="&{false false false false false }" interface=lxc7867a78e945e k8sPodName=openstack/staffeln-conductor-78b95c5877-k49ph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61eb58f127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-conductor-78b95c5877-k49ph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61eb58f127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-conductor-78b95c5877-k49ph subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8c28e00c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=3727 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-f8dd5b686-brtcj oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=d8c28e00c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=3727 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-f8dd5b686-brtcj subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61eb58f127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=33661 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-conductor-78b95c5877-k49ph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61eb58f127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=547 identity=33661 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-conductor-78b95c5877-k49ph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8c28e00c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=745 identity=3727 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-f8dd5b686-brtcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8c28e00c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=745 identity=3727 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/staffeln-api-f8dd5b686-brtcj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=61eb58f127 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=547 identity=33661 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-conductor-78b95c5877-k49ph subsys=endpoint level=info msg="Successful endpoint creation" containerID=61eb58f127 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=547 identity=33661 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-conductor-78b95c5877-k49ph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=553c4ea2f8 endpointID=1926 k8sNamespace=openstack k8sPodName=staffeln-db-init-8z55q subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=9f32d523-361b-42b9-a8a5-06f3b3afadd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=553c4ea2f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1926 identity=51687 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-init-8z55q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 3964c9a9-4368-4b2c-b1e8-5d270a728290 default }" containerID=f66f134cf7824f2ff9582e03e66fc886b8ccd2fae3cbc7a97b415b05276e8aaa datapathConfiguration="&{false false false false false }" interface=lxcb27756016776 k8sPodName=openstack/staffeln-db-sync-l7bnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f66f134cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-l7bnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f66f134cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6c96918c-fc29-419d-a6bd-8d7561a68c80,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6c96918c-fc29-419d-a6bd-8d7561a68c80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-l7bnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f66f134cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-l7bnm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6c96918c-fc29-419d-a6bd-8d7561a68c80;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=6c96918c-fc29-419d-a6bd-8d7561a68c80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f66f134cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=8116 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6c96918c-fc29-419d-a6bd-8d7561a68c80,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6c96918c-fc29-419d-a6bd-8d7561a68c80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-l7bnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f66f134cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2658 identity=8116 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-l7bnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f66f134cf7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2658 identity=8116 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-l7bnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f66f134cf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2658 identity=8116 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/staffeln-db-sync-l7bnm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager