level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.147915ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.132µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="975.29µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.96µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.007687ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.081µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.301µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="61.221µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.212µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="79.782µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="616.073µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="6.361µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.731823ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.290388ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="45.651µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="57.371µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="263.405µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="140.743µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="214.534µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.170199ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="90.652µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="18.961µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.187359ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="18.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.959842ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.90885ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="15.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="27.251µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="31.481µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="36.951µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="86.842µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="359.338µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="41.89µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="264.846µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.432391ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.450011ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.25µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="32.511µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.192" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.192}] 10.0.0.0/24 [] [] 10.0.0.38 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44147" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.474390357s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.28µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.681µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="32.071µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="26.601µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2142 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.449967339s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 c7837da6-0efc-499d-bddf-c27512489413 default }" containerID=5171b39206d1a9b11faa6a11eddce2b9a12a6e5d468bbe9017ba3743d5719836 datapathConfiguration="&{false false false false false }" interface=lxca8cc03af7647 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5171b39206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5171b39206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5171b39206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=6633 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5171b39206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=6633 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 81e25d9e-c60f-47d9-b0e1-ec92300d45e5 default }" containerID=db016079f10ab1a782e3bb460865f696c37b65ddefb0c9af9c790fe6c06aafd0 datapathConfiguration="&{false false false false false }" interface=lxce0d8b6725695 k8sPodName=kube-system/coredns-7c96b6546b-rcxkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db016079f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rcxkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db016079f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rcxkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db016079f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identity=3101 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rcxkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db016079f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1780 identity=3101 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rcxkn subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=305.420008ms file-path=/var/run/cilium/state/templates/8341267fe6ff6bb043f3555102e421a177d22c9caa7452b4dfe2a81417b69748/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2142 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 ipv4=10.0.0.38 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identityLabels="reserved:health" ipv4=10.0.0.38 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identity=4 identityLabels="reserved:health" ipv4=10.0.0.38 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.060271354s file-path=/var/run/cilium/state/templates/35dc106d9b3a42a03c1ba0b8b533440c9757ac47bd91f4800295d06da597cc1c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=5171b39206 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=908 identity=6633 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5171b39206 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=908 identity=6633 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3159 identity=4 ipv4=10.0.0.38 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db016079f1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1780 identity=3101 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rcxkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=db016079f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1780 identity=3101 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rcxkn subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5171b39206 endpointID=908 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5zlr5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ca24dc6c-ab9c-4419-ac89-1203968072df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=5171b39206 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=908 identity=6633 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5zlr5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 21030523-ba7d-46b6-8ec4-c09aa831dd13 default }" containerID=9a1d80fa25446c40cad8aee987e731027bff47c23ab06f2d86b7d687ee7f4609 datapathConfiguration="&{false false false false false }" interface=lxc8840ade0af0e k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lmxdp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a1d80fa25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lmxdp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a1d80fa25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lmxdp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a1d80fa25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=4883 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lmxdp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a1d80fa25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=4883 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lmxdp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a1d80fa25 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=947 identity=4883 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lmxdp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a1d80fa25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=947 identity=4883 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lmxdp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2142 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02142 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02142 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02142 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02142:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2142 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 5d3a5176-60ab-4cf9-b810-6291243455d5 default }" containerID=dc804b38c9ac89e883fd15a0f61591455031460ed3d31e7043a44aaa526bdae7 datapathConfiguration="&{false false false false false }" interface=lxcdb83c98c6c97 k8sPodName=kube-system/coredns-67659f764b-twwdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc804b38c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3195 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-twwdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc804b38c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3195 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-twwdq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dc804b38c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3195 identity=3101 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-twwdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc804b38c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3195 identity=3101 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-twwdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc804b38c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3195 identity=3101 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-twwdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc804b38c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3195 identity=3101 ipv4=10.0.0.152 ipv6= k8sPodName=kube-system/coredns-67659f764b-twwdq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 0e874c0b-001d-4511-901c-29a4af4e9df1 default }" containerID=fd7a43f740564b0a671e847fabfa572c87f7f8008af9ca1ab99137bf08851438 datapathConfiguration="&{false false false false false }" interface=lxc8e2b2fcbdfa5 k8sPodName=kube-system/coredns-67659f764b-mcgfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd7a43f740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-mcgfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd7a43f740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-mcgfx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fd7a43f740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 identity=3101 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-mcgfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd7a43f740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 identity=3101 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-mcgfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd7a43f740 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3294 identity=3101 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-mcgfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd7a43f740 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3294 identity=3101 ipv4=10.0.0.246 ipv6= k8sPodName=kube-system/coredns-67659f764b-mcgfx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 b229e95a-71ed-4a3e-80da-7228f1625cdc default }" containerID=b211c6cfbdca8e45617a3aedf522ef0f497a07752fcbd704662eb598c98317c0 datapathConfiguration="&{false false false false false }" interface=lxc479870723449 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nkv4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b211c6cfbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nkv4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b211c6cfbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nkv4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b211c6cfbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=17403 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nkv4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b211c6cfbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=17403 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nkv4j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b211c6cfbd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1068 identity=17403 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nkv4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=b211c6cfbd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1068 identity=17403 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-nkv4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db016079f1 endpointID=1780 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rcxkn subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=db016079f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1780 identity=3101 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rcxkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 649846eb-6c5b-4f12-9469-478a5889a5ef default }" containerID=303cabd340df7429b877c5d0fc67ab038d7e74849987fdafc8d5d0225fc9c221 datapathConfiguration="&{false false false false false }" interface=lxc4ebdb045c7c1 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qmx88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=303cabd340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qmx88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=303cabd340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qmx88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=303cabd340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=14459 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qmx88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=303cabd340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=14459 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qmx88 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 d00bda22-12da-47aa-927e-57586b109b5f default }" containerID=6e4d046b64ad349d4d36f03387bd3cd7ebeff00d8569f8a7129d4223ab314b50 datapathConfiguration="&{false false false false false }" interface=lxc545abdf02686 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5fths labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e4d046b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5fths subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e4d046b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5fths subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e4d046b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=12496 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5fths oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e4d046b64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=12496 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5fths subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=303cabd340 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=718 identity=14459 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qmx88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=303cabd340 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=718 identity=14459 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qmx88 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 e3dfe7f8-affe-4880-ab5a-cab1b12a921c default }" containerID=9a0ff68281bc2343408a9e40408b847377ab430a2587eb755092228ee9a007bb datapathConfiguration="&{false false false false false }" interface=lxce71526f1850a k8sPodName=cert-manager/cert-manager-75c4c745bc-vw2xg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a0ff68281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw2xg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a0ff68281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw2xg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a0ff68281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identity=11130 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw2xg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a0ff68281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=366 identity=11130 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw2xg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e4d046b64 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=815 identity=12496 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5fths subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e4d046b64 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=815 identity=12496 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-5fths subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a0ff68281 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=366 identity=11130 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw2xg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a0ff68281 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=366 identity=11130 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-vw2xg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 f1ca68d9-5476-4540-847d-7258a35272be default }" containerID=2b791deda1aa70e93116366601fe459c0960c8983545a56d6b13efd9128579e4 datapathConfiguration="&{false false false false false }" interface=lxcf4a2ea882356 k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b791deda1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b791deda1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b791deda1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=10902 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b791deda1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=10902 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b791deda1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3881 identity=10902 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b791deda1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3881 identity=10902 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b791deda1 endpointID=3881 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-8qwqs subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=7856bef3-1927-4019-a1a9-b39cd950fb9e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=2b791deda1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3881 identity=10902 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8qwqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 19875987-f101-4d7c-96fc-fcc57ba52941 default }" containerID=2d892311e005b5da3697feb8b6137beb269956b178f652c5a2a9fb016d88be26 datapathConfiguration="&{false false false false false }" interface=lxcb881dd6357f4 k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d892311e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d892311e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2d892311e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d892311e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=13646 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d892311e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=13646 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d892311e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=110 identity=13646 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d892311e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=110 identity=13646 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d892311e0 endpointID=110 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-z45t6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=5db026dc-550c-4622-8783-f63ea2db0ddc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=2d892311e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=110 identity=13646 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-z45t6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 75ade8ed-18a2-4c43-b5f0-5ecfcfd62625 default }" containerID=1bbbc7250ee0698d488d00da2c81be23e21da7bb479a9f879f94c941f7342dc1 datapathConfiguration="&{false false false false false }" interface=lxccca9f96ec9e8 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bbbc7250e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bbbc7250e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1bbbc7250e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bbbc7250e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=3276 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bbbc7250e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=3276 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bbbc7250e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1460 identity=3276 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bbbc7250e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1460 identity=3276 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fhrsn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.195 432b3f05-e16b-4ff3-ab9f-5caecbf206f3 default }" containerID=38d1b9561695d9d4b992dab1e58b863dcf80037e6a7988428098d9917e2795b3 datapathConfiguration="&{false false false false false }" interface=lxc9bc211c1a3dd k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38d1b95616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38d1b95616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38d1b95616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=7568 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38d1b95616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=7568 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38d1b95616 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=126 identity=7568 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38d1b95616 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=126 identity=7568 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38d1b95616 endpointID=126 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-j78p4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=aecbaa07-7cf8-4217-9415-713316c8600a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=38d1b95616 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=126 identity=7568 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j78p4 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5a83c0a1-b022-4ab0-925d-c07f93f0bc1b] Description:}]" policyAddRequest=0dcc60c8-7887-49da-a0c6-62769de37f01 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0dcc60c8-7887-49da-a0c6-62769de37f01 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=86476127-17c7-4993-85de-09400dcc83f8] Description:}]" policyAddRequest=80e518c2-1e31-4bcd-b7c8-b3bc26da1a2d subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=80e518c2-1e31-4bcd-b7c8-b3bc26da1a2d policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.4 7c59a8ce-ab4b-444b-884b-edd7353392c0 default }" containerID=d478db9f5a9d2cd635c1e2c741abe366be084e06387b3b2b132967f072286c12 datapathConfiguration="&{false false false false false }" interface=lxcd5c4d937befe k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-gtxtn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d478db9f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-gtxtn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d478db9f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-gtxtn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d478db9f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identity=45310 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-gtxtn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d478db9f5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identity=45310 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-gtxtn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d478db9f5a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3556 identity=45310 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-gtxtn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d478db9f5a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3556 identity=45310 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-gtxtn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 15d4f703-3f01-4fc3-8874-2839ff30fb1f default }" containerID=09bf70e8b7490af791b3cec2ba731e0485c76b501adb60baf499745a54ea6371 datapathConfiguration="&{false false false false false }" interface=lxc3731d9a60f11 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-z82fn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09bf70e8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-z82fn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09bf70e8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-z82fn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09bf70e8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=9740 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-z82fn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09bf70e8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3309 identity=9740 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-z82fn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09bf70e8b7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3309 identity=9740 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-z82fn subsys=endpoint level=info msg="Successful endpoint creation" containerID=09bf70e8b7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3309 identity=9740 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-z82fn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 37397318-9828-43ab-b6a8-7386e4e25c49 default }" containerID=67b896e373a99205bec3eae09439079a9dbb70da5d2bcabed586513709c3e135 datapathConfiguration="&{false false false false false }" interface=lxc3c92a40e260e k8sPodName=openstack/pxc-operator-7cff949c8b-p9q8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67b896e373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-p9q8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67b896e373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-p9q8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67b896e373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=36773 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-p9q8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67b896e373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1496 identity=36773 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-p9q8x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=67b896e373 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1496 identity=36773 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-p9q8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=67b896e373 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1496 identity=36773 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-p9q8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 794bc7c7-066d-40e5-9abc-bb882421a26a default }" containerID=3b2eb6529cf03fbd5f1d36b53f7d43e1484ed6cb918f58459eb2e9eb5a79801f datapathConfiguration="&{false false false false false }" interface=lxc7eb3d3a827a2 k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b2eb6529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b2eb6529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3b2eb6529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3b2eb6529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=20620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b2eb6529c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=20620 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b2eb6529c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=364 identity=20620 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b2eb6529c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=364 identity=20620 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 a1e193de-569a-45d5-92bc-b9cab7c38a6f default }" containerID=008f33a919513c54bc3180140410aeb5c2e0d53a35c26960b443dce1e58edda9 datapathConfiguration="&{false false false false false }" interface=lxcd898da713af2 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=008f33a919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=008f33a919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=008f33a919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=58402 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=008f33a919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=58402 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=008f33a919 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=787 identity=58402 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=008f33a919 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=787 identity=58402 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b2eb6529c endpointID=364 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3b2eb6529c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=364 identity=20620 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92691c82-fa6d-4ee0-b896-5686e35b6358 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 af0e065a-0e3f-4cbe-bfd1-12dc748c8913 default }" containerID=073871553d4e09166ef8f72270da749c260b70340232e2c3900cd8f88b70e7d4 datapathConfiguration="&{false false false false false }" interface=lxc44e89232e240 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=073871553d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4075 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=073871553d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4075 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=073871553d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4075 identity=9074 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=073871553d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4075 identity=9074 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=073871553d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4075 identity=9074 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=073871553d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4075 identity=9074 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=849aeb59-79e4-4bab-9753-72366ff66702] Description:}]" policyAddRequest=cd66d254-ded1-4a8a-95dc-b0b8867f06b1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=cd66d254-ded1-4a8a-95dc-b0b8867f06b1 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.44 ab1b206b-5125-4f23-b6dc-a29176b25cc6 default }" containerID=110a424854ef06b0e212224c557b7840dcaa6fb29f113b1963fff6d606b4a1ae datapathConfiguration="&{false false false false false }" interface=lxc6878f189396c k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=110a424854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.44 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=110a424854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.44 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=110a424854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=24751 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.44 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=110a424854 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=24751 ipv4=10.0.0.44 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=110a424854 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=50 identity=24751 ipv4=10.0.0.44 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=110a424854 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=50 identity=24751 ipv4=10.0.0.44 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010317610615877826 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.115 43456f7f-40b5-47b0-871f-2925230af8c0 default }" containerID=b71dbee1ccd2733c997ee8f913ed0e10d154c7074415552dd46dffd007dd2fa8 datapathConfiguration="&{false false false false false }" interface=lxc505767d8b04e k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r6z58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b71dbee1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r6z58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b71dbee1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r6z58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b71dbee1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=65374 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r6z58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b71dbee1cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=65374 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r6z58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 8480d35c-037f-4228-899a-38354876708e default }" containerID=1542c902e8bbf730f889d7b9a2c12991eccda92f4f0d1ad77763e1188dc82738 datapathConfiguration="&{false false false false false }" interface=lxca757103cda09 k8sPodName=monitoring/node-feature-discovery-worker-qs7xs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1542c902e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qs7xs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1542c902e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qs7xs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.157 6ee32d33-785e-465a-87fb-635fbcff975e default }" containerID=6a60ce18ceaf939f7c437fd070d45cc6e5dd53c226a798b964a0f2a15e9e8180 datapathConfiguration="&{false false false false false }" interface=lxc2430082b7d14 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zmfgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a60ce18ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zmfgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a60ce18ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zmfgh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1542c902e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=9469 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qs7xs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1542c902e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=9469 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qs7xs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a60ce18ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=8780 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zmfgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a60ce18ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=8780 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zmfgh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b71dbee1cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=28 identity=65374 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r6z58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b71dbee1cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=28 identity=65374 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-r6z58 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1542c902e8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1101 identity=9469 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qs7xs subsys=endpoint level=info msg="Successful endpoint creation" containerID=1542c902e8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1101 identity=9469 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qs7xs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6a60ce18ce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=208 identity=8780 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zmfgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a60ce18ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=208 identity=8780 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zmfgh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 73c74f39-0c9f-4b06-a7ac-c0ba5c83c61f default }" containerID=a62e29371ca7260b35e04f9fca3eb89c739feb48080dd31f6bf2e306811fd356 datapathConfiguration="&{false false false false false }" interface=lxcedadf88dbd75 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-h2mrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a62e29371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-h2mrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a62e29371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-h2mrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a62e29371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=62269 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-h2mrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a62e29371c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=62269 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-h2mrg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a62e29371c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2351 identity=62269 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-h2mrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a62e29371c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2351 identity=62269 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-h2mrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2142 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02142 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02142 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02142 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02142:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2142 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 a867a338-c6f6-4ef0-8074-a60f79d515b0 default }" containerID=48124f4f18f997a2feee0a1e3f1b64e066eb502346210888a7531441a5a988c3 datapathConfiguration="&{false false false false false }" interface=lxc54d0a11d8aea k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48124f4f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48124f4f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48124f4f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=9823 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48124f4f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=9823 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=48124f4f18 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=187 identity=9823 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48124f4f18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=187 identity=9823 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 subsys=daemon level=info msg="Delete endpoint request" containerID=48124f4f18 endpointID=187 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-dqbw4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=9cf529ff-7a22-4b2b-9f48-ef95801a51d8 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=48124f4f18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=187 identity=9823 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dqbw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 05070714-be87-4202-8aea-e3f4c6fea183 default }" containerID=2a25893347aff6d3fbf36c8e981b53a17e362b92a5e84e5c4883fb3e225c20aa datapathConfiguration="&{false false false false false }" interface=lxcdd5f7dcf9535 k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a25893347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a25893347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.53 ae88fef9-f903-4481-a951-ba29e67b3f64 default }" containerID=d45b449fc72abf99bf59c9b1befe8fe0de9ddd806ee9f783ea10ce265eb21e51 datapathConfiguration="&{false false false false false }" interface=lxcfed39732129c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d45b449fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d45b449fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d45b449fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2a25893347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a25893347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 identity=45684 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a25893347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2680 identity=45684 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d45b449fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identity=20273 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d45b449fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identity=20273 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 fc303ad6-ddd5-40d8-9c6c-6e8cbcd4aa37 default }" containerID=8186c690e341be24173b7924e39028992d3f6fa5aba6c9efa8c6542aae33c5ff datapathConfiguration="&{false false false false false }" interface=lxc2e32b1e72b6f k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-8rnbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8186c690e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-8rnbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8186c690e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-8rnbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8186c690e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=12372 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-8rnbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8186c690e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=12372 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-8rnbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a25893347 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2680 identity=45684 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a25893347 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2680 identity=45684 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c4f5bbd9c-m525r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d45b449fc7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2137 identity=20273 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d45b449fc7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2137 identity=20273 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-gqnqr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8186c690e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=67 identity=12372 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-8rnbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=8186c690e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=67 identity=12372 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-8rnbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 ec301903-8208-4918-abba-086fea3c03b1 default }" containerID=175b1b7fb14e8fc11277d5c3d8f3d3dbfeb34f66fd9f08adc998a90c1db01fd2 datapathConfiguration="&{false false false false false }" interface=lxc598c9464b32c k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=175b1b7fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=175b1b7fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=175b1b7fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=6931 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=175b1b7fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=6931 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=175b1b7fb1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=794 identity=6931 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb subsys=endpoint level=info msg="Successful endpoint creation" containerID=175b1b7fb1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=794 identity=6931 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=175b1b7fb1 endpointID=794 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-wjknb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=c5fe18ae-e8f3-422d-a417-29a89db4fb47 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=175b1b7fb1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=794 identity=6931 ipv4=10.0.0.30 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wjknb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 56148c18-1ce7-42ce-8b9e-0067ea30d6cf default }" containerID=a3fb2ad3d4dee7b4bce096be7cdccccc0b6f2b742b2b24bfb80bb9112718f151 datapathConfiguration="&{false false false false false }" interface=lxc42c96e12c33a k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3fb2ad3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3fb2ad3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3fb2ad3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=20620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3fb2ad3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=20620 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a3fb2ad3d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=768 identity=20620 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3fb2ad3d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=768 identity=20620 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 8300c681-e0f2-483f-b796-880b9bf51a6b default }" containerID=265ef8e9bbba847f61021a39c7fa4e36b4834065f3fbcabfbb97fbc34b4496c2 datapathConfiguration="&{false false false false false }" interface=lxcd55134ae6fd7 k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=265ef8e9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=265ef8e9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=265ef8e9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 identity=20620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=265ef8e9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2175 identity=20620 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=265ef8e9bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2175 identity=20620 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 subsys=endpoint level=info msg="Successful endpoint creation" containerID=265ef8e9bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2175 identity=20620 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 subsys=daemon level=info msg="Delete endpoint request" containerID=a3fb2ad3d4 endpointID=768 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=265ef8e9bb endpointID=2175 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a3fb2ad3d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=768 identity=20620 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-73585856-dbb4-4121-b919-aca67c35bb5d subsys=endpoint level=info msg="Removed endpoint" containerID=265ef8e9bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2175 identity=20620 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14de8bff-0526-4001-bc82-92b243263d01 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 df8df608-4329-4417-96b4-f5080d4f4fb5 default }" containerID=d919c16d3cda091970738a1059973680799d4ade6eb63c5c713d69c37f21d052 datapathConfiguration="&{false false false false false }" interface=lxc8cd4743627b3 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d919c16d3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d919c16d3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d919c16d3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d919c16d3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identity=46397 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d919c16d3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=345 identity=46397 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 7646cd69-95d7-4215-9abc-b7816fd909be default }" containerID=ba42cd9802c6e9c52ebe890283584f4919831b00a4fc0ceb5848118e6d08e11a datapathConfiguration="&{false false false false false }" interface=lxc903e96d9386a k8sPodName=monitoring/loki-gateway-748b556d75-bs8fq labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.233 24aaaf08-05cd-46cc-bc72-6100bb231a69 default }" containerID=0584aaef15c662db4386d6ff965ed41a9a840e413af41e7149fd3e5b810f7735 datapathConfiguration="&{false false false false false }" interface=lxcf8d777e2b6f1 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba42cd9802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-bs8fq subsys=endpoint level=info msg="New endpoint" containerID=0584aaef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba42cd9802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-bs8fq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=0584aaef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba42cd9802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=17754 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-bs8fq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba42cd9802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=17754 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-bs8fq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0584aaef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=30353 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0584aaef15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3489 identity=30353 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d919c16d3c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=345 identity=46397 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d919c16d3c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=345 identity=46397 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 58230c56-b8d0-4d8c-a4e0-61f9f631a335 default }" containerID=93de0636735e5622a383b4c7a0d789ae5072e6c1473b05415691bd8c5a8ef3d3 datapathConfiguration="&{false false false false false }" interface=lxc23368a0d1922 k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93de063673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93de063673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93de063673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=20620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93de063673 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=20620 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba42cd9802 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=676 identity=17754 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-bs8fq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba42cd9802 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=676 identity=17754 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-bs8fq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0584aaef15 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3489 identity=30353 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0584aaef15 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3489 identity=30353 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=93de063673 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1137 identity=20620 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 subsys=endpoint level=info msg="Successful endpoint creation" containerID=93de063673 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1137 identity=20620 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 27cccf1c-e589-4f45-9a09-32d37941f24a default }" containerID=e0b94bd408dae53d79f716a37cb5c6761fd5bd29f5b4b5208c8940c96530eae9 datapathConfiguration="&{false false false false false }" interface=lxc75654b65565a k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0b94bd408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0b94bd408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0b94bd408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identity=7387 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0b94bd408 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identity=7387 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0b94bd408 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4043 identity=7387 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0b94bd408 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4043 identity=7387 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.97 08478248-4898-4041-bedc-40e00cd41502 default }" containerID=9e4e5fd4a18917d326262e8dead6b677da2518c9f07cfc3503b774ca08d87fb1 datapathConfiguration="&{false false false false false }" interface=lxcd582b9d7a4cf k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e4e5fd4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e4e5fd4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e4e5fd4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e4e5fd4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=62708 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e4e5fd4a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=62708 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e4e5fd4a1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=14 identity=62708 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e4e5fd4a1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=14 identity=62708 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 e8542f89-ec91-41cf-9e74-e286f91b8951 default }" containerID=fc6a587e40f7b0fc63c603ad7877b7dbffa123766cf129cddacfff1ea180a468 datapathConfiguration="&{false false false false false }" interface=lxc50510c754e40 k8sPodName=monitoring/vector-pwz4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc6a587e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-pwz4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc6a587e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-pwz4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc6a587e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=45770 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-pwz4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc6a587e40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=45770 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-pwz4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc6a587e40 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=129 identity=45770 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-pwz4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc6a587e40 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=129 identity=45770 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-pwz4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93de063673 endpointID=1137 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=93de063673 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1137 identity=20620 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12b0d747-2db1-45be-a9b5-4aa6bb3c2467 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 4350d7d1-7e39-449e-a84d-d2ff0fef6703 default }" containerID=397e3a1d636004207bf42ec09b79c39b447ca30e30b05eb6ec5e282f54dead8b datapathConfiguration="&{false false false false false }" interface=lxc97a74d730c70 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=397e3a1d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2621 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=397e3a1d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2621 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=397e3a1d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2621 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=397e3a1d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2621 identity=24546 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=397e3a1d63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2621 identity=24546 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=397e3a1d63 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2621 identity=24546 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=397e3a1d63 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2621 identity=24546 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 2ac17410-6e6a-4c24-8112-02a1e1c49a82 default }" containerID=aaee3d03913b2e0fc1c1251631cc4198c143e378f3d9c1e69be7fc28abc5eed5 datapathConfiguration="&{false false false false false }" interface=lxc515e9a065882 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vf8zp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaee3d0391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vf8zp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaee3d0391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vf8zp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaee3d0391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=6899 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vf8zp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaee3d0391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=6899 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vf8zp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aaee3d0391 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2174 identity=6899 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vf8zp subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaee3d0391 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2174 identity=6899 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vf8zp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 b005b699-0f3c-4799-90dd-62ae09276954 default }" containerID=40f6806c3cba1cf3362ccedf82050ff96db02fa81a9bcd42c84686605dbacc7e datapathConfiguration="&{false false false false false }" interface=lxc2226b2eabb0d k8sPodName=openstack/memcached-memcached-6479589586-wkh5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40f6806c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wkh5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40f6806c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wkh5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=40f6806c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=34171 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wkh5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40f6806c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=752 identity=34171 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wkh5n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40f6806c3c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=752 identity=34171 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wkh5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=40f6806c3c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=752 identity=34171 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wkh5n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 a8426f93-4a48-40ba-b39b-8190c77478ba default }" containerID=e1da426b7c4a76bed88c458beb2b86b6ac8e29615257e6695133577336fb968a datapathConfiguration="&{false false false false false }" interface=lxce53faa467826 k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1da426b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1da426b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1da426b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 identity=20620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1da426b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2505 identity=20620 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1da426b7c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2505 identity=20620 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1da426b7c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2505 identity=20620 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 subsys=daemon level=info msg="Delete endpoint request" containerID=e1da426b7c endpointID=2505 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e1da426b7c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2505 identity=20620 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76553688-82de-4d81-b3f2-007322244194 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 c004b655-c610-4b97-b893-06772ad430f7 default }" containerID=c9446fcfb3c83513893551044b4f88a211871e49647a3af9e28224be3c34fcac datapathConfiguration="&{false false false false false }" interface=lxc5d76cd4a7579 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9446fcfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9446fcfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c9446fcfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=13089 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9446fcfb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=13089 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9446fcfb3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=78 identity=13089 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9446fcfb3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=78 identity=13089 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 308f3b38-ca46-4c14-b784-6a80c04264a0 default }" containerID=acc1084952f22cbe6aa6d2797a6c3b5c480aaf245dac2adac3138d1a4866409c datapathConfiguration="&{false false false false false }" interface=lxcf94a8d9647aa k8sPodName=openstack/keystone-api-7fc8dfd4d-xm42q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acc1084952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc8dfd4d-xm42q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acc1084952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc8dfd4d-xm42q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acc1084952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=14780 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc8dfd4d-xm42q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acc1084952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=14780 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc8dfd4d-xm42q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 b556ad58-aca2-46d0-9e7f-86e6ff03f967 default }" containerID=574af3efb3f418b780ef72e96870aae4917611526146dc7c1c81066ba4ef489b datapathConfiguration="&{false false false false false }" interface=lxc254a8ddd2b69 k8sPodName=openstack/keystone-credential-setup-ztj45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=574af3efb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-credential-setup-ztj45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=574af3efb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-credential-setup-ztj45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=574af3efb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=52179 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-credential-setup-ztj45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=574af3efb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=52179 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-credential-setup-ztj45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acc1084952 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=994 identity=14780 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc8dfd4d-xm42q subsys=endpoint level=info msg="Successful endpoint creation" containerID=acc1084952 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=994 identity=14780 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc8dfd4d-xm42q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=574af3efb3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=105 identity=52179 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-credential-setup-ztj45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=574af3efb3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=105 identity=52179 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-credential-setup-ztj45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=574af3efb3 endpointID=105 k8sNamespace=openstack k8sPodName=keystone-credential-setup-ztj45 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=67ccd8b4-37a8-4223-a1ab-a14478d36286 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=574af3efb3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=105 identity=52179 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-credential-setup-ztj45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 afd9ac80-34a1-45b6-a90c-788a813b2a23 default }" containerID=03889c2851230136ab036e3fed886def4c4544982c9b7765a22591302cdd8d8d datapathConfiguration="&{false false false false false }" interface=lxc5f50472d8de7 k8sPodName=openstack/keystone-db-init-jbjln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03889c2851 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-jbjln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03889c2851 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-jbjln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=03889c2851 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 identity=62727 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-jbjln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03889c2851 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 identity=62727 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-jbjln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03889c2851 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2169 identity=62727 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-jbjln subsys=endpoint level=info msg="Successful endpoint creation" containerID=03889c2851 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2169 identity=62727 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-jbjln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03889c2851 endpointID=2169 k8sNamespace=openstack k8sPodName=keystone-db-init-jbjln subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=e459fdea-545e-465a-aa80-e4059b27d5b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=03889c2851 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2169 identity=62727 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-jbjln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 bd78509d-5d1b-40ec-9e0e-6c4a95dfa3b2 default }" containerID=02bd224f3b4cb5c281ff9e3d1b9fe4b47403b4e06935f0d073f06a3a9d40d98e datapathConfiguration="&{false false false false false }" interface=lxc20958c55bc63 k8sPodName=openstack/keystone-fernet-setup-8bwz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02bd224f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-fernet-setup-8bwz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02bd224f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-fernet-setup-8bwz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02bd224f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=19544 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-fernet-setup-8bwz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02bd224f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=19544 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-fernet-setup-8bwz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02bd224f3b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=348 identity=19544 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-fernet-setup-8bwz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02bd224f3b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=348 identity=19544 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-fernet-setup-8bwz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02bd224f3b endpointID=348 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-8bwz2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=70d59b55-6f90-4735-8199-5978bf3239d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=02bd224f3b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=348 identity=19544 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-fernet-setup-8bwz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 bd1a9925-8927-40e9-addf-83ba7298a291 default }" containerID=08d0f630890d2e74aec121dcb67e4e9449702c0bbe088edeb770dd3780df3298 datapathConfiguration="&{false false false false false }" interface=lxc0ec1ca750ed0 k8sPodName=openstack/keystone-db-sync-j4c59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08d0f63089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-db-sync-j4c59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08d0f63089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-db-sync-j4c59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08d0f63089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=23167 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-db-sync-j4c59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08d0f63089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=23167 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-db-sync-j4c59 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08d0f63089 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=337 identity=23167 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-db-sync-j4c59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08d0f63089 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=337 identity=23167 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-db-sync-j4c59 subsys=daemon level=info msg="Delete endpoint request" containerID=08d0f63089 endpointID=337 k8sNamespace=openstack k8sPodName=keystone-db-sync-j4c59 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4e108f50-44fd-4919-b4e6-91b3842787b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=08d0f63089 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=337 identity=23167 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-db-sync-j4c59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 9748bc3c-f979-4236-9ebf-137628c6e618 default }" containerID=76862642dbcb552039eedd2e711b5ef00d9a1e300487d105c1edcbc141d51dd1 datapathConfiguration="&{false false false false false }" interface=lxc1e6f4105e8e2 k8sPodName=openstack/keystone-rabbit-init-nz52t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76862642db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-nz52t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76862642db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-nz52t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76862642db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=27573 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-nz52t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76862642db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=27573 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-nz52t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76862642db datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2482 identity=27573 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-nz52t subsys=endpoint level=info msg="Successful endpoint creation" containerID=76862642db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2482 identity=27573 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-nz52t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76862642db endpointID=2482 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-nz52t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d436074c-5d9c-4c48-99b0-e4c1f9cbdba1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=76862642db datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2482 identity=27573 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-rabbit-init-nz52t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 cd14bc96-a54e-434a-8b83-0563e3789276 default }" containerID=aaf5d7e555a704188c81a38df9ed302798488a90a92386839fd098cdbb3630b3 datapathConfiguration="&{false false false false false }" interface=lxc6a1c95343130 k8sPodName=openstack/keystone-domain-manage-2rmjb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaf5d7e555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaf5d7e555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=196de59e-d08a-40d6-bfbd-286263679853,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=196de59e-d08a-40d6-bfbd-286263679853,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aaf5d7e555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=196de59e-d08a-40d6-bfbd-286263679853;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=196de59e-d08a-40d6-bfbd-286263679853;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaf5d7e555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identity=51210 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=196de59e-d08a-40d6-bfbd-286263679853,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=196de59e-d08a-40d6-bfbd-286263679853,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaf5d7e555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identity=51210 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aaf5d7e555 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3310 identity=51210 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaf5d7e555 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3310 identity=51210 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aaf5d7e555 endpointID=3310 k8sNamespace=openstack k8sPodName=keystone-domain-manage-2rmjb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=196de59e-d08a-40d6-bfbd-286263679853 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=196de59e-d08a-40d6-bfbd-286263679853 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aaf5d7e555 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3310 identity=51210 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-2rmjb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 4a8da397-437a-4b6f-8b2c-e0e0dfd8a4ce default }" containerID=160f49eace8573c911763ba9dd53e6ddafc7b728321dcf0621fbcd0b49cd24e5 datapathConfiguration="&{false false false false false }" interface=lxc8abab655fab5 k8sPodName=openstack/keystone-bootstrap-nsqmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=160f49eace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3248 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-nsqmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=160f49eace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3248 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-nsqmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=160f49eace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3248 identity=32377 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-nsqmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=160f49eace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3248 identity=32377 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-nsqmt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=160f49eace datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3248 identity=32377 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-nsqmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=160f49eace datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3248 identity=32377 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-nsqmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=160f49eace endpointID=3248 k8sNamespace=openstack k8sPodName=keystone-bootstrap-nsqmt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=74f72853-b9b0-40cd-8eb0-b46f00022eec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=160f49eace datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3248 identity=32377 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/keystone-bootstrap-nsqmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 457e6070-bcf6-4386-8dc9-eeaa8ae37212 default }" containerID=85cddf0750f7234bab8ddfb6d845c8741f6f9ae379d1d0c076f8996db706ba87 datapathConfiguration="&{false false false false false }" interface=lxcc3292fd76a26 k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85cddf0750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85cddf0750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85cddf0750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=20620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85cddf0750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=20620 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85cddf0750 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=829 identity=20620 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85cddf0750 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=829 identity=20620 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 subsys=daemon level=info msg="Delete endpoint request" containerID=85cddf0750 endpointID=829 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=85cddf0750 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=829 identity=20620 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01121e0c-a373-4230-90eb-d538b5fd8293 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 b8617755-c4e4-40c0-8de9-43b741c5ca57 default }" containerID=3b55e1fbb1757d35c0b2c5d59aca986ca63060bae156f3a943a99cdbfd4f8cfd datapathConfiguration="&{false false false false false }" interface=lxcf6dadd3b0c7c k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b55e1fbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b55e1fbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b55e1fbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=9495 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b55e1fbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=9495 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b55e1fbb1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1316 identity=9495 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b55e1fbb1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1316 identity=9495 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 f9625880-7183-4137-b090-e8ab36039d93 default }" containerID=642cf4a32e5cee1bb922cc9afb527c9b31bcbfe9d1836c58224b37300f762f02 datapathConfiguration="&{false false false false false }" interface=lxcbbb8d7cc6e5e k8sPodName=openstack/barbican-api-b57745964-hh5qr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=642cf4a32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-b57745964-hh5qr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=642cf4a32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-b57745964-hh5qr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=642cf4a32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-b57745964-hh5qr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=642cf4a32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=21938 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-b57745964-hh5qr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=642cf4a32e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=21938 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-b57745964-hh5qr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 effdaa15-a338-41ab-a223-0619ea541289 default }" containerID=c03b05c8c89b0df22e6bb3d0371765dff401db5d20d660a684334077d55aadb1 datapathConfiguration="&{false false false false false }" interface=lxc61da36ee84c5 k8sPodName=openstack/barbican-db-init-zvj6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c03b05c8c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-init-zvj6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c03b05c8c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-init-zvj6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c03b05c8c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=6137 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-init-zvj6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c03b05c8c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=6137 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-init-zvj6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=642cf4a32e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3807 identity=21938 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-b57745964-hh5qr subsys=endpoint level=info msg="Successful endpoint creation" containerID=642cf4a32e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3807 identity=21938 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-api-b57745964-hh5qr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c03b05c8c8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3423 identity=6137 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-init-zvj6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=c03b05c8c8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3423 identity=6137 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-init-zvj6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c03b05c8c8 endpointID=3423 k8sNamespace=openstack k8sPodName=barbican-db-init-zvj6b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=5fa830cd-6daf-484a-9fa1-75ddd58a21b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c03b05c8c8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3423 identity=6137 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-init-zvj6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 c7f7b653-d412-4db1-833f-f8739f29ba84 default }" containerID=d85f85c780655f70a9a69436ced77ba171ce7764f32fcb18518216fa30208386 datapathConfiguration="&{false false false false false }" interface=lxcccf4051c1837 k8sPodName=openstack/barbican-db-sync-8wdx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d85f85c780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d85f85c780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d85f85c780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d85f85c780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identity=56243 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d85f85c780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identity=56243 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d85f85c780 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1392 identity=56243 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d85f85c780 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1392 identity=56243 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d85f85c780 endpointID=1392 k8sNamespace=openstack k8sPodName=barbican-db-sync-8wdx5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=697e8b40-711c-4ce1-a82e-48b483d8ef2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d85f85c780 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1392 identity=56243 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/barbican-db-sync-8wdx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 32e62dee-81e3-469e-84bf-ba24553baf66 default }" containerID=f3743dc574ed376f39dcf0d3487248bfb42638c20f9f4ab4f4ee0c04ad18948e datapathConfiguration="&{false false false false false }" interface=lxcf5dfb6143431 k8sPodName=openstack/barbican-rabbit-init-bh95w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3743dc574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-rabbit-init-bh95w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3743dc574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-rabbit-init-bh95w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3743dc574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=12802 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-rabbit-init-bh95w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3743dc574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=12802 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-rabbit-init-bh95w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f3743dc574 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2082 identity=12802 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-rabbit-init-bh95w subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3743dc574 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2082 identity=12802 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-rabbit-init-bh95w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3743dc574 endpointID=2082 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-bh95w subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b5d87419-7c59-47d6-9541-9d87d20f46c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f3743dc574 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2082 identity=12802 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/barbican-rabbit-init-bh95w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 c6cd76e5-fc41-432d-bacc-630a7bf0aa39 default }" containerID=984390e934b4dcf1cbc39b2efe2e420a10aea8323449da17517f89e9c067552f datapathConfiguration="&{false false false false false }" interface=lxc7158753163db k8sPodName=openstack/barbican-ks-service-n9qs8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=984390e934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3212 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-service-n9qs8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=984390e934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3212 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-service-n9qs8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=984390e934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3212 identity=50634 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-service-n9qs8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=984390e934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3212 identity=50634 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-service-n9qs8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=984390e934 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3212 identity=50634 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-service-n9qs8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=984390e934 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3212 identity=50634 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-service-n9qs8 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03593747886428504 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=984390e934 endpointID=3212 k8sNamespace=openstack k8sPodName=barbican-ks-service-n9qs8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=c81dfb0f-efde-4fe2-8baf-5630e505f0d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=984390e934 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3212 identity=50634 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-ks-service-n9qs8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 7fc073b3-938e-43bd-a4b3-3c77dbfc9ca0 default }" containerID=377793c56215977e58c797266ddb868ab621e6f842a9da756dd91d6687d6884c datapathConfiguration="&{false false false false false }" interface=lxccfd27fbfe3d6 k8sPodName=openstack/barbican-ks-endpoints-ff7j5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=377793c562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ff7j5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=377793c562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ff7j5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=377793c562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identity=21744 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ff7j5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=377793c562 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2670 identity=21744 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ff7j5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=377793c562 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2670 identity=21744 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ff7j5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=377793c562 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2670 identity=21744 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ff7j5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=377793c562 endpointID=2670 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-ff7j5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=63c72476-f5bf-43e7-82ad-eaf4d4d69df8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=377793c562 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2670 identity=21744 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ff7j5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 b5bb91ce-929d-4f22-92de-a2aec37b9609 default }" containerID=dfedbb5462d0475232dc511d6c6b0397a99b53880986bca0208f4004cb41bed6 datapathConfiguration="&{false false false false false }" interface=lxca002a5e16467 k8sPodName=openstack/barbican-ks-user-vls9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfedbb5462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-user-vls9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfedbb5462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-user-vls9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=dfedbb5462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identity=8301 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-user-vls9z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfedbb5462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3084 identity=8301 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-user-vls9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfedbb5462 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3084 identity=8301 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-user-vls9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfedbb5462 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3084 identity=8301 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-user-vls9z subsys=daemon level=info msg="Delete endpoint request" containerID=dfedbb5462 endpointID=3084 k8sNamespace=openstack k8sPodName=barbican-ks-user-vls9z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=766df68b-872c-4df0-842d-dc8a18e4920e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=dfedbb5462 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3084 identity=8301 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-ks-user-vls9z subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.71 3a30001e-d396-4177-aaf2-3e31e39f8877 default }" containerID=42fbf44bf49c050ef97f528fde94dd2cecca2ee9617896214fb32ca4f8f2c326 datapathConfiguration="&{false false false false false }" interface=lxc74b273fb1e9e k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42fbf44bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 ipv4=10.0.0.71 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42fbf44bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.71 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=42fbf44bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42fbf44bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=14585 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.71 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42fbf44bf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=14585 ipv4=10.0.0.71 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42fbf44bf4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3115 identity=14585 ipv4=10.0.0.71 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh subsys=endpoint level=info msg="Successful endpoint creation" containerID=42fbf44bf4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3115 identity=14585 ipv4=10.0.0.71 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-jpndh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 89015e4f-6d96-4c8d-835f-fd2b837364bc default }" containerID=2ffa6e745771136aba13d55594a3f52c385b4555e32729f815a44bd18a19a04b datapathConfiguration="&{false false false false false }" interface=lxc561b7a6274a5 k8sPodName=openstack/rook-ceph-detect-version-cbgtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ffa6e7457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2480 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cbgtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ffa6e7457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2480 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cbgtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ffa6e7457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2480 identity=15237 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cbgtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ffa6e7457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2480 identity=15237 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cbgtg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ffa6e7457 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2480 identity=15237 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cbgtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ffa6e7457 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2480 identity=15237 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cbgtg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ffa6e7457 endpointID=2480 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-cbgtg subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2cd4b3d5-f916-4c67-8076-46f10ac9cd0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=2ffa6e7457 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2480 identity=15237 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cbgtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 2f1d5ed1-61d2-470d-bb75-48b7bc339179 default }" containerID=2e99102d11a15e6fc7b3f1dcdbe1cab536260adcef9e1144d0c5ec25a13950f6 datapathConfiguration="&{false false false false false }" interface=lxc4dd52feaf5c2 k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e99102d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e99102d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e99102d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=20620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e99102d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=20620 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e99102d11 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=264 identity=20620 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e99102d11 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=264 identity=20620 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 a9da4da1-4120-4b59-84ff-f361febe323f default }" containerID=d4f397726dab33d3c1cfe6fd4177aeebefeb8fc4109779c33cfa3c1f818145c2 datapathConfiguration="&{false false false false false }" interface=lxc3f47354ff98a k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4f397726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4f397726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4f397726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=20016 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d4f397726d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=20016 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4f397726d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1752 identity=20016 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4f397726d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1752 identity=20016 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg subsys=daemon level=info msg="Delete endpoint request" containerID=2e99102d11 endpointID=264 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2e99102d11 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=264 identity=20620 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52a8f361-7bbc-4d12-8eec-3d3684822325 subsys=endpoint level=info msg="Delete endpoint request" containerID=d4f397726d endpointID=1752 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-x6wtg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8ca42efd-93c1-48d4-b9a2-4c5d12ba4917 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=d4f397726d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1752 identity=20016 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6wtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 b60d6dd7-2796-45a4-8645-93dd19c28700 default }" containerID=39cd2ffa274f5bb81570aed0532d46a877883ec1aa9f8a035e577a856f3fd684 datapathConfiguration="&{false false false false false }" interface=lxc69da683a42ed k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39cd2ffa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39cd2ffa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39cd2ffa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=48225 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39cd2ffa27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=283 identity=48225 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=39cd2ffa27 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=283 identity=48225 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39cd2ffa27 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=283 identity=48225 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 da1650ec-a313-4406-a81e-91b843623d7a default }" containerID=adc7ca241ee8d85313bb5805c0f2db4e32719ee4a9405c05c9a02625c701140e datapathConfiguration="&{false false false false false }" interface=lxc9306371698ee k8sPodName=openstack/glance-db-init-6f292 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adc7ca241e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-db-init-6f292 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adc7ca241e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-db-init-6f292 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adc7ca241e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=29878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-db-init-6f292 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adc7ca241e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=29878 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-db-init-6f292 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adc7ca241e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=324 identity=29878 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-db-init-6f292 subsys=endpoint level=info msg="Successful endpoint creation" containerID=adc7ca241e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=324 identity=29878 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-db-init-6f292 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=adc7ca241e endpointID=324 k8sNamespace=openstack k8sPodName=glance-db-init-6f292 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5afde906-f1f6-466a-8187-dc94cb4bb6d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=adc7ca241e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=324 identity=29878 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/glance-db-init-6f292 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 3d0d225e-436d-44a3-8067-c023e5eeb268 default }" containerID=6a39b41a048b239283da31b331af908f32d6d8b867427c302c1fced628dee141 datapathConfiguration="&{false false false false false }" interface=lxc00470cca0ba2 k8sPodName=openstack/glance-db-sync-sq9cp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a39b41a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-sq9cp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a39b41a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-sq9cp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6a39b41a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=31533 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-sq9cp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a39b41a04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=31533 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-sq9cp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a39b41a04 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=257 identity=31533 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-sq9cp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a39b41a04 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=257 identity=31533 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-sq9cp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a39b41a04 endpointID=257 k8sNamespace=openstack k8sPodName=glance-db-sync-sq9cp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=bfaf27cf-6083-4d16-9185-5972ceecf5d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6a39b41a04 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=257 identity=31533 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-sq9cp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 1f318d49-daa7-4bc5-a85f-58486b22c440 default }" containerID=be5de7e013408eccf9b43a542fa2e3d4f53653cfb45a66e91c1b9a26e0fc24d5 datapathConfiguration="&{false false false false false }" interface=lxc1c49110c2b0e k8sPodName=openstack/glance-rabbit-init-2qz6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be5de7e013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-2qz6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be5de7e013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-2qz6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be5de7e013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=16510 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-2qz6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be5de7e013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=16510 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-2qz6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be5de7e013 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=31 identity=16510 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-2qz6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=be5de7e013 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=31 identity=16510 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-2qz6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be5de7e013 endpointID=31 k8sNamespace=openstack k8sPodName=glance-rabbit-init-2qz6g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=654915f6-df39-4d80-a83b-9155fc99efaa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=be5de7e013 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=31 identity=16510 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/glance-rabbit-init-2qz6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 1cee84c7-b1be-43e7-bf00-9635bd472808 default }" containerID=9f815b7b4fd0c22dede4f5b0e641a2043bcbd5a4d386d0dd3142b9c407afe1d8 datapathConfiguration="&{false false false false false }" interface=lxc07b0f362b0bc k8sPodName=openstack/glance-ks-service-6rsjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f815b7b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f815b7b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=853c096c-618c-47da-be67-6ab10638856d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=853c096c-618c-47da-be67-6ab10638856d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9f815b7b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=853c096c-618c-47da-be67-6ab10638856d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=853c096c-618c-47da-be67-6ab10638856d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f815b7b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=1845 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=853c096c-618c-47da-be67-6ab10638856d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=853c096c-618c-47da-be67-6ab10638856d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f815b7b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=1845 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f815b7b4f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=235 identity=1845 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f815b7b4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=235 identity=1845 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 ab05aeed-0a4c-4467-84cc-3bd385c8c9c2 default }" containerID=0340ee864cbd496eed65b38479bc346dbf0c8a523633986935bdd7de228ce04d datapathConfiguration="&{false false false false false }" interface=lxc9206a3ac1f4e k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jpdlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0340ee864c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jpdlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0340ee864c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jpdlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0340ee864c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=49525 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jpdlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0340ee864c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=49525 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jpdlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 6e75dd0b-908b-4bdd-9573-0d5c133cc110 default }" containerID=81f6063ddc54d4516aadbc23de4702ac802f6e4e783f01e3e62fea6d2c0ee6bb datapathConfiguration="&{false false false false false }" interface=lxcdc4638997591 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t4b69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81f6063ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t4b69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81f6063ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t4b69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81f6063ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identity=11549 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t4b69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81f6063ddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identity=11549 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t4b69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0340ee864c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=327 identity=49525 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jpdlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0340ee864c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=327 identity=49525 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-jpdlv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81f6063ddc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2112 identity=11549 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t4b69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81f6063ddc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2112 identity=11549 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-t4b69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f815b7b4f endpointID=235 k8sNamespace=openstack k8sPodName=glance-ks-service-6rsjj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=853c096c-618c-47da-be67-6ab10638856d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=853c096c-618c-47da-be67-6ab10638856d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9f815b7b4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=235 identity=1845 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-service-6rsjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 be84b543-e3dd-4a76-9bce-4b7f2cccdf42 default }" containerID=212d0c1f6ebbafcc7ca7cbca250922c76b9136736d858d4aeb3a22d0efc11b2a datapathConfiguration="&{false false false false false }" interface=lxcd19e45ca39f7 k8sPodName=openstack/glance-ks-endpoints-hnxzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=212d0c1f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-endpoints-hnxzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=212d0c1f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=786e8b3d-5366-4520-b072-443d79d969d0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=786e8b3d-5366-4520-b072-443d79d969d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-endpoints-hnxzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=786e8b3d-5366-4520-b072-443d79d969d0;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=786e8b3d-5366-4520-b072-443d79d969d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=212d0c1f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=15903 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=786e8b3d-5366-4520-b072-443d79d969d0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=786e8b3d-5366-4520-b072-443d79d969d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-endpoints-hnxzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=212d0c1f6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=15903 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-endpoints-hnxzb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=212d0c1f6e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=886 identity=15903 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-endpoints-hnxzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=212d0c1f6e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=886 identity=15903 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-endpoints-hnxzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 9b7c0730-2e51-4440-a946-72553418fd2f default }" containerID=b2542ea43744d0a631abcf1da135b00f5be47723ba4ce281f762ee653d76738f datapathConfiguration="&{false false false false false }" interface=lxc274e764ba869 k8sPodName=openstack/ceph-object-controller-detect-version-d522w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2542ea437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-d522w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2542ea437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-d522w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b2542ea437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=40233 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-d522w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2542ea437 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=40233 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-d522w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2542ea437 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=294 identity=40233 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-d522w subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2542ea437 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=294 identity=40233 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-d522w subsys=daemon level=info msg="Delete endpoint request" containerID=212d0c1f6e endpointID=886 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-hnxzb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=786e8b3d-5366-4520-b072-443d79d969d0 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=786e8b3d-5366-4520-b072-443d79d969d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=212d0c1f6e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=886 identity=15903 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/glance-ks-endpoints-hnxzb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2542ea437 endpointID=294 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-d522w subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=abe317de-aa36-46a8-93e5-5bd2c11eaba5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=b2542ea437 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=294 identity=40233 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-d522w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 a5506344-34c3-41c4-be8a-110063e780d2 default }" containerID=f8c9dac08929d9b41e85fbdb273d7bedf037d965224c3317910d9da97863522a datapathConfiguration="&{false false false false false }" interface=lxcfb711922d90b k8sPodName=openstack/glance-ks-user-79rrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8c9dac089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-user-79rrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8c9dac089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-user-79rrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8c9dac089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identity=52087 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-user-79rrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8c9dac089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1924 identity=52087 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-user-79rrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f8c9dac089 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1924 identity=52087 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-user-79rrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8c9dac089 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1924 identity=52087 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-user-79rrl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8c9dac089 endpointID=1924 k8sNamespace=openstack k8sPodName=glance-ks-user-79rrl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=21f8a91c-bab4-4c4a-88f5-dd31698c4463 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f8c9dac089 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1924 identity=52087 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-user-79rrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 41544d61-c4dc-44e5-adcb-6f2e093a2c3f default }" containerID=79f89385973fc5887c7b9856e61c91b8c18d4ed9049559021a70a76431f406b1 datapathConfiguration="&{false false false false false }" interface=lxc8353f3e6b58a k8sPodName=openstack/glance-metadefs-load-qqv86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79f8938597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79f8938597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79f8938597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=79f8938597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=11606 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79f8938597 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=11606 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79f8938597 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1216 identity=11606 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79f8938597 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1216 identity=11606 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79f8938597 endpointID=1216 k8sNamespace=openstack k8sPodName=glance-metadefs-load-qqv86 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b57d9623-ae7c-404e-8317-f8d7845f0aa2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=79f8938597 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1216 identity=11606 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-metadefs-load-qqv86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 54f27d0d-6120-4b66-aedc-ce0d0195bbbc default }" containerID=1f52c818146cbf2784da0497b2dc30145a3ed3cb3139af21fb7f8001b50838bd datapathConfiguration="&{false false false false false }" interface=lxc7723b031a9b7 k8sPodName=openstack/glance-storage-init-nmxvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f52c81814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f52c81814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1f52c81814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1f52c81814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identity=38937 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f52c81814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2168 identity=38937 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f52c81814 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2168 identity=38937 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f52c81814 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2168 identity=38937 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f52c81814 endpointID=2168 k8sNamespace=openstack k8sPodName=glance-storage-init-nmxvq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=74d539fd-2fc2-4eed-b48b-a80289214e6f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1f52c81814 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2168 identity=38937 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-storage-init-nmxvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 552781ff-38d6-4786-885a-fff21eade9fe default }" containerID=260e576f11cf2406ea7bccea0d97e9970761266a25e5c9d939d9f9a4581041a8 datapathConfiguration="&{false false false false false }" interface=lxc4fe9969cc7ff k8sPodName=openstack/glance-api-5cd9bf8869-hr77v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=260e576f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-api-5cd9bf8869-hr77v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=260e576f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-api-5cd9bf8869-hr77v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=260e576f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-api-5cd9bf8869-hr77v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=260e576f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=23936 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-api-5cd9bf8869-hr77v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=260e576f11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=23936 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-api-5cd9bf8869-hr77v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=260e576f11 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3521 identity=23936 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-api-5cd9bf8869-hr77v subsys=endpoint level=info msg="Successful endpoint creation" containerID=260e576f11 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3521 identity=23936 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-api-5cd9bf8869-hr77v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 105dbb1f-3c58-44e7-b24b-cf4c8d8b36c4 default }" containerID=ebd50405ca37d8f065a1fc3688c7003ce3a7e0210dbeebb56015c23eff81aae2 datapathConfiguration="&{false false false false false }" interface=lxccf914c1b9397 k8sPodName=openstack/staffeln-api-645876cf95-mjbxs labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.250 7c0535ff-71fa-43a2-b97e-23dfd7661438 default }" containerID=8724d69d1de15bd7ab3bdbce6498faf93433ad99d9841d3b2e2f90663f29ce9a datapathConfiguration="&{false false false false false }" interface=lxccd451ecf95ce k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebd50405ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-api-645876cf95-mjbxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebd50405ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-api-645876cf95-mjbxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=8724d69d1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8724d69d1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8724d69d1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ebd50405ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-api-645876cf95-mjbxs line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ebd50405ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=875 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-api-645876cf95-mjbxs oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=ebd50405ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=875 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-api-645876cf95-mjbxs subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8724d69d1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=56583 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8724d69d1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=56583 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 17cc807c-62c6-4d9b-8238-9b401689e702 default }" containerID=3dd6f1a058a8219e04ace28c0dc96f4793b6134b55961d26f94965edb070ed62 datapathConfiguration="&{false false false false false }" interface=lxca091db9b00ff k8sPodName=openstack/staffeln-db-init-fwv7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dd6f1a058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-db-init-fwv7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dd6f1a058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d0d57154-c136-4e00-b621-fc18860225f4,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d0d57154-c136-4e00-b621-fc18860225f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-db-init-fwv7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d0d57154-c136-4e00-b621-fc18860225f4;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=d0d57154-c136-4e00-b621-fc18860225f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dd6f1a058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=10434 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d0d57154-c136-4e00-b621-fc18860225f4,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d0d57154-c136-4e00-b621-fc18860225f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-db-init-fwv7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dd6f1a058 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=10434 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-db-init-fwv7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebd50405ca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=191 identity=875 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-api-645876cf95-mjbxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebd50405ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=191 identity=875 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-api-645876cf95-mjbxs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8724d69d1d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=273 identity=56583 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8724d69d1d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=273 identity=56583 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-68d4c4b676-rv2m8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3dd6f1a058 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3723 identity=10434 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-db-init-fwv7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dd6f1a058 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3723 identity=10434 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-db-init-fwv7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3dd6f1a058 endpointID=3723 k8sNamespace=openstack k8sPodName=staffeln-db-init-fwv7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=d0d57154-c136-4e00-b621-fc18860225f4 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=d0d57154-c136-4e00-b621-fc18860225f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=3dd6f1a058 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3723 identity=10434 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-db-init-fwv7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 c96cafff-c047-4606-bbbd-63fd4eec8c93 default }" containerID=bc8f4fef5502062dfcf6db07a1729ceaf9edd4c44d929d8b2369d7f479c26c08 datapathConfiguration="&{false false false false false }" interface=lxca421bc8efebc k8sPodName=openstack/staffeln-db-sync-fkjrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc8f4fef55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-db-sync-fkjrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc8f4fef55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e9d528ce-90d0-4cc5-9bfe-82e4a1f5f726,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e9d528ce-90d0-4cc5-9bfe-82e4a1f5f726,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-db-sync-fkjrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bc8f4fef55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-db-sync-fkjrt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e9d528ce-90d0-4cc5-9bfe-82e4a1f5f726;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=e9d528ce-90d0-4cc5-9bfe-82e4a1f5f726;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc8f4fef55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=48798 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e9d528ce-90d0-4cc5-9bfe-82e4a1f5f726,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e9d528ce-90d0-4cc5-9bfe-82e4a1f5f726,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-db-sync-fkjrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc8f4fef55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=48798 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-db-sync-fkjrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc8f4fef55 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=106 identity=48798 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-db-sync-fkjrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc8f4fef55 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=106 identity=48798 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/staffeln-db-sync-fkjrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager