level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="847.698µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="46.321µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="855.148µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.35µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.532073ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.42µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.941µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="62.001µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="65.151µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="81.572µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="458.31µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.74µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.668306ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.939236ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="59.171µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="53.581µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="257.995µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="134.652µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="93.532µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=41.836965ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="85.902µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="17.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="17.481µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.235.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.907249ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="19.061µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.645145ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.359728ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="42.13µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.49µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="38.661µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="308.947µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.48µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="222.235µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="864.728µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.230667ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.48µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.761µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.235 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.235 ipAddr.ipv6="" k8sNodeIP=199.204.45.235 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.235" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.107" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.235" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.235} {CiliumInternalIP 10.0.0.107}] 10.0.0.0/24 [] [] 10.0.0.57 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46097" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.429142303s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.08µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.14µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="46.511µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.77µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.560384142s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.989249ms file-path=/var/run/cilium/state/templates/37bb5ef316f23d60394110a43584a05884456b5f916a4d84b2beca0f70753351/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1785 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 ef4ab067-e4f6-40f0-b895-03c958fe78c1 default }" containerID=9e1aa6ec51d482fa53bb2b4366b76a46f407ffb6073ed901eb1e7f3fa1a85a08 datapathConfiguration="&{false false false false false }" interface=lxc24003769c9ec k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e1aa6ec51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e1aa6ec51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5616f321-a971-4571-a8c7-e934625e1998,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5616f321-a971-4571-a8c7-e934625e1998,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=5616f321-a971-4571-a8c7-e934625e1998;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=5616f321-a971-4571-a8c7-e934625e1998;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e1aa6ec51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=42440 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5616f321-a971-4571-a8c7-e934625e1998,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5616f321-a971-4571-a8c7-e934625e1998,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e1aa6ec51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=42440 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 7f4e25e6-4f76-4ed5-a7b2-be331c9d6d0c default }" containerID=730aacb7c800b93dcca096d37e4ab0ea05bd1de6a185893ec38dcc74bcd627a3 datapathConfiguration="&{false false false false false }" interface=lxc8c9bc7f06e05 k8sPodName=kube-system/coredns-7c96b6546b-7pqtr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=730aacb7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7pqtr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=730aacb7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7pqtr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=730aacb7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=59919 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7pqtr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=730aacb7c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=59919 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7pqtr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 a7093658-9c9f-4cb7-a3d5-0a6d956bebdb default }" containerID=e6f6d1586af81285fcacd94fab66434a45d43d5601ef0750829f535a9b44f15d datapathConfiguration="&{false false false false false }" interface=lxc1e2d255281f7 k8sPodName=kube-system/coredns-67659f764b-9vdwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6f6d1586a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vdwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6f6d1586a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vdwp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e6f6d1586a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=59919 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vdwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6f6d1586a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=59919 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vdwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 3c2839d7-3a96-4fbd-bbdd-2e4fa32f2252 default }" containerID=9e6a3bfb8ec00717298a0b03d99d12dab79c5253e5ff700e1146f50ec14e8c76 datapathConfiguration="&{false false false false false }" interface=lxc26065f487b15 k8sPodName=kube-system/coredns-67659f764b-2vj6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e6a3bfb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vj6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e6a3bfb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vj6s subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9e6a3bfb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 identity=59919 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vj6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e6a3bfb8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1129 identity=59919 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vj6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 83d92108-34e5-453f-a962-f2c589a12150 default }" containerID=d95f7778d6514ff0ec9c4aea8f41e51c0c54dbb0faab0c996a87d5ff1fcb01d7 datapathConfiguration="&{false false false false false }" interface=lxc76a3587ab841 k8sPodName=cert-manager/cert-manager-75c4c745bc-kjnj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d95f7778d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kjnj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 c4ca3999-15a8-4d2b-bf6a-611d55326561 default }" containerID=d53b83e690161927cd726940252c45e25d2109ea287bdc2043e3a086c6c9c2f8 datapathConfiguration="&{false false false false false }" interface=lxc6911aab1c766 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d53b83e690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d95f7778d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kjnj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d53b83e690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 80e0717a-b37f-4e53-b163-6366b485c27b default }" containerID=8652dee0ff2d3c1e8c55967e4ab24be64fed9876ebb54ddc578f6e2e01f5e14e datapathConfiguration="&{false false false false false }" interface=lxc5afcd6b174f4 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.180 1a68ea0a-12af-4089-93de-a3b90eb62755 default }" containerID=33c2437060f404cc59be49f8e7c55c6302bf62993dab1951e3051abe37e5879c datapathConfiguration="&{false false false false false }" interface=lxc45c4d03557e1 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8652dee0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8652dee0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp subsys=endpoint level=info msg="New endpoint" containerID=33c2437060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33c2437060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.57 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="reserved:health" ipv4=10.0.0.57 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=4 identityLabels="reserved:health" ipv4=10.0.0.57 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=d95f7778d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=29749 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kjnj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d95f7778d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=29749 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kjnj9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8652dee0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d53b83e690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=33c2437060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.083517068s file-path=/var/run/cilium/state/templates/84433bc284925b15c7d9fecc5105c90b957d52965030e9f532d00aac9be6aebc/bpf_lxc.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d53b83e690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=19308 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=d53b83e690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=664 identity=19308 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6f6d1586a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=108 identity=59919 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vdwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6f6d1586a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=108 identity=59919 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-9vdwp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e1aa6ec51 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=615 identity=42440 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e1aa6ec51 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=615 identity=42440 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=688 identity=4 ipv4=10.0.0.57 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=730aacb7c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3408 identity=59919 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7pqtr subsys=endpoint level=info msg="Successful endpoint creation" containerID=730aacb7c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3408 identity=59919 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7pqtr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d95f7778d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3414 identity=29749 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kjnj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d95f7778d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3414 identity=29749 ipv4=10.0.0.179 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-kjnj9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e6a3bfb8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1129 identity=59919 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vj6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e6a3bfb8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1129 identity=59919 ipv4=10.0.0.161 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vj6s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d53b83e690 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=664 identity=19308 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d53b83e690 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=664 identity=19308 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9spg4 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8652dee0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 identity=46661 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8652dee0ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 identity=46661 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=8652dee0ff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=762 identity=46661 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8652dee0ff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=762 identity=46661 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jzldp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=33c2437060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33c2437060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=27171 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33c2437060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=27171 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33c2437060 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2486 identity=27171 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=33c2437060 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2486 identity=27171 ipv4=10.0.0.180 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9cj6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=730aacb7c8 endpointID=3408 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-7pqtr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=730aacb7c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3408 identity=59919 ipv4=10.0.0.24 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7pqtr subsys=endpoint level=info msg="Delete endpoint request" containerID=9e1aa6ec51 endpointID=615 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-tp2xl subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=5616f321-a971-4571-a8c7-e934625e1998 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=5616f321-a971-4571-a8c7-e934625e1998 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=9e1aa6ec51 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=615 identity=42440 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tp2xl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 e3553859-6a3a-4d15-b222-6fc26c797cc3 default }" containerID=147e5e2298a0e39ec8ae13626a477dc52ef68307ef883dde6d22ee256df87e36 datapathConfiguration="&{false false false false false }" interface=lxc3654bdb4c180 k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=147e5e2298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=147e5e2298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=81a8243b-2522-4417-919a-051fbaef4267,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=81a8243b-2522-4417-919a-051fbaef4267,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=81a8243b-2522-4417-919a-051fbaef4267;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=81a8243b-2522-4417-919a-051fbaef4267;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=147e5e2298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=55807 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=81a8243b-2522-4417-919a-051fbaef4267,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=81a8243b-2522-4417-919a-051fbaef4267,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=147e5e2298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=55807 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=147e5e2298 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1495 identity=55807 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s subsys=endpoint level=info msg="Successful endpoint creation" containerID=147e5e2298 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1495 identity=55807 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=147e5e2298 endpointID=1495 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-zmj7s subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=81a8243b-2522-4417-919a-051fbaef4267 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=81a8243b-2522-4417-919a-051fbaef4267 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=147e5e2298 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1495 identity=55807 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zmj7s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 7eef6818-666d-4a01-a4f4-6cbd5e31039a default }" containerID=74de5af56b6ff4ea78285a666e3e97066b86b1098f174597780901b234154748 datapathConfiguration="&{false false false false false }" interface=lxc296f29e42a98 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gqpsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74de5af56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gqpsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74de5af56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gqpsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74de5af56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=21463 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gqpsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74de5af56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=21463 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gqpsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74de5af56b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4013 identity=21463 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gqpsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=74de5af56b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4013 identity=21463 ipv4=10.0.0.93 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gqpsc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.80 c960aa2d-3d82-41b3-98ef-e216effdd3fb default }" containerID=8c5f638ffb64b4c771941b95a90a6359b19a7b358020ca71c92f2507872341bc datapathConfiguration="&{false false false false false }" interface=lxce60cdd7efcd3 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c5f638ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c5f638ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c5f638ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=14253 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c5f638ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=14253 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c5f638ffb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=500 identity=14253 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c5f638ffb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=500 identity=14253 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c5f638ffb endpointID=500 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-nmghd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=d4f9d40e-8fe7-4149-8b27-abb9a03436f8 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=8c5f638ffb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=500 identity=14253 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nmghd subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c0348460-7db7-4fd9-aa9d-b92634355621] Description:}]" policyAddRequest=c51343ca-fd42-4943-9b07-4f3264333a4d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c51343ca-fd42-4943-9b07-4f3264333a4d policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=09500c70-a12e-48ba-bc2e-4d99528ab676] Description:}]" policyAddRequest=814e7498-6546-42d0-adba-ad0a96dcf584 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=814e7498-6546-42d0-adba-ad0a96dcf584 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 e477a249-7e67-438d-83dd-39baaf30deb6 default }" containerID=3003236002708e34b1e0d3e711355c3452dedc755fc6bbbd585e4ff0dcdb7810 datapathConfiguration="&{false false false false false }" interface=lxc44fd63a31a9b k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-j9742 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3003236002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-j9742 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3003236002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-j9742 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3003236002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=1366 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-j9742 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3003236002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=1366 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-j9742 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3003236002 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1743 identity=1366 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-j9742 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3003236002 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1743 identity=1366 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-j9742 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 57872cf5-229b-4402-bbac-2de6d9123590 default }" containerID=932fac0c230a9b8b8a0a19cf57289861e4d4535f59e92cbbc56cf0ed3ebb8a84 datapathConfiguration="&{false false false false false }" interface=lxcde1eb2a29930 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pd442 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=932fac0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pd442 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=932fac0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pd442 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=932fac0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identity=13875 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pd442 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=932fac0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2902 identity=13875 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pd442 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=932fac0c23 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2902 identity=13875 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pd442 subsys=endpoint level=info msg="Successful endpoint creation" containerID=932fac0c23 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2902 identity=13875 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-pd442 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 45585c5f-d80c-461f-8b40-6fab0467a33e default }" containerID=7e03178a1c4a474aa12d2bc2b1a341f0ae2391fd1314b0af7a2cca2b3b1bf5a9 datapathConfiguration="&{false false false false false }" interface=lxc142387131025 k8sPodName=openstack/pxc-operator-7cff949c8b-zbjgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e03178a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zbjgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e03178a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zbjgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e03178a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 identity=6179 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zbjgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e03178a1c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=729 identity=6179 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zbjgq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e03178a1c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=729 identity=6179 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zbjgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e03178a1c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=729 identity=6179 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-zbjgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 b75961a8-0828-406b-9ab3-6ee45c6bb41b default }" containerID=abdc2e2bdce75603b5fe214abeadbae0b69d992bdc0f95a6242eb506e123a17e datapathConfiguration="&{false false false false false }" interface=lxc03a2330c1b19 k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abdc2e2bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abdc2e2bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abdc2e2bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=abdc2e2bdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=9178 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abdc2e2bdc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1965 identity=9178 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab subsys=endpoint level=info msg="Successful endpoint creation" containerID=abdc2e2bdc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1965 identity=9178 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 3f48c7e9-3f4a-48d2-9d6a-ea7328797c03 default }" containerID=8a5d50e34d64a7636d397ad1903808b5b4efcefe22b2dc53da8c9ba7aba848bc datapathConfiguration="&{false false false false false }" interface=lxc6fd04eb6fd52 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a5d50e34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a5d50e34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a5d50e34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=42019 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a5d50e34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=42019 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a5d50e34d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=683 identity=42019 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a5d50e34d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=683 identity=42019 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=abdc2e2bdc endpointID=1965 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=abdc2e2bdc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1965 identity=9178 ipv4=10.0.0.199 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b2833b0-c3be-45bf-bc8a-888712dab3ab subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 16f161f6-3b73-47bf-8d68-7aefe51f2541 default }" containerID=2d635fbe12fbc3a09656ee1d140add6b8c8461f5c9fb39070ef185a8686d2b9e datapathConfiguration="&{false false false false false }" interface=lxcc10a7cf9d13a k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d635fbe12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d635fbe12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d635fbe12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=6009 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2d635fbe12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=6009 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d635fbe12 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1334 identity=6009 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d635fbe12 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1334 identity=6009 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2d98a4b6-c837-46b3-80a6-7f6782a59e63] Description:}]" policyAddRequest=ba0bf3c4-d868-4dec-a42a-140b40e0a076 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ba0bf3c4-d868-4dec-a42a-140b40e0a076 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.252 0f406a46-a504-496b-a0b7-51bd36efe85a default }" containerID=5cf6b73dabcc2edcc8f88eb1bc9339dfbc6159b47607f89908caa8e28ec8f0c0 datapathConfiguration="&{false false false false false }" interface=lxc15a4572186c0 k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cf6b73dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cf6b73dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cf6b73dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cf6b73dab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=9178 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cf6b73dab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=697 identity=9178 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cf6b73dab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=697 identity=9178 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d subsys=daemon level=info msg="Delete endpoint request" containerID=5cf6b73dab endpointID=697 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5cf6b73dab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=697 identity=9178 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8abccec3-c8be-4e74-b82d-26f58eca836d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 4e2504bc-7531-4ffe-8590-2ee842ec883d default }" containerID=377c4bfee2536c60b586eb21a1d82e876a85cecdd82420c1b0dcca5cd2319819 datapathConfiguration="&{false false false false false }" interface=lxc6c1ac13d0756 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=377c4bfee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=377c4bfee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=377c4bfee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=377c4bfee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=52816 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=377c4bfee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=52816 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=377c4bfee2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=697 identity=52816 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=377c4bfee2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=697 identity=52816 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ee8571a0-b911-44dd-8aee-8782b13c669a] Description:}]" policyAddRequest=42ecbe67-cacb-479e-bc09-c2c01c85e4fd subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=42ecbe67-cacb-479e-bc09-c2c01c85e4fd policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.32 04c2d111-63fb-4b54-b6a2-adaff1e3c3cc default }" containerID=5a1700a54b29e1cca897662e570e685c0ecea68098ef607d91edaa65d3d152f0 datapathConfiguration="&{false false false false false }" interface=lxcec3f504f3aad k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a1700a54b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 ipv4=10.0.0.32 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a1700a54b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.32 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5a1700a54b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a1700a54b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=31132 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.32 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a1700a54b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=31132 ipv4=10.0.0.32 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a1700a54b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3723 identity=31132 ipv4=10.0.0.32 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a1700a54b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3723 identity=31132 ipv4=10.0.0.32 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010676072341634315 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.141 25eadb4c-4fbb-449d-be34-401d69f2dfd3 default }" containerID=66d22517c22a24318fd5297efed470542d9ead2fc2f65d12777cf946a6425602 datapathConfiguration="&{false false false false false }" interface=lxc6832e1386cc0 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pchmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66d22517c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pchmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66d22517c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pchmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66d22517c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=445 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pchmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66d22517c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=445 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pchmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 a521d3d7-c694-4e2f-87c6-c41500f8af11 default }" containerID=1be99186979018ad14211d170a6597aa89c38faf399c696e4f1c6bc4551e0836 datapathConfiguration="&{false false false false false }" interface=lxc2efcb03ae91d k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7wwrw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1be9918697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7wwrw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1be9918697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7wwrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.47 56aa62f5-4bff-4be7-82da-44fe9872fd98 default }" containerID=6ad3e0f9f20bdbf89715f3a70183a59fda289e82783bc8a8ac6b794fbc318630 datapathConfiguration="&{false false false false false }" interface=lxc98d8ef356447 k8sPodName=monitoring/node-feature-discovery-worker-q7l4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ad3e0f9f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7l4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ad3e0f9f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7l4m subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1be9918697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=4647 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7wwrw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1be9918697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=4647 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7wwrw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ad3e0f9f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identity=33527 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7l4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ad3e0f9f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1112 identity=33527 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7l4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66d22517c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2035 identity=445 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pchmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=66d22517c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2035 identity=445 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pchmq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1be9918697 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=4647 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7wwrw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1be9918697 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=4647 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-7wwrw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ad3e0f9f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1112 identity=33527 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7l4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ad3e0f9f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1112 identity=33527 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7l4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 76fc7fdd-2362-4c92-a4d3-cd7609129425 default }" containerID=7bc301775af42523be9eff7b7f682085493db2a77eb936dcc0fee1e2f6408f50 datapathConfiguration="&{false false false false false }" interface=lxc02d5c29226e9 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jzdk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bc301775a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jzdk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bc301775a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jzdk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bc301775a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identity=10427 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jzdk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bc301775a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2381 identity=10427 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jzdk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bc301775a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2381 identity=10427 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jzdk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bc301775a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2381 identity=10427 ipv4=10.0.0.74 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jzdk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1785 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01785 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01785 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01785 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01785:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1785 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 5f2dfea0-dc95-49fc-8c74-b472ff696ee5 default }" containerID=f5357f388ada0024c1cd61e9f98cf76a70d91de6870c4d80ee2ea321e5ca3304 datapathConfiguration="&{false false false false false }" interface=lxcff2caf3bb039 k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5357f388a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5357f388a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5357f388a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identity=23498 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5357f388a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identity=23498 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f5357f388a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2137 identity=23498 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5357f388a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2137 identity=23498 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5357f388a endpointID=2137 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-dkh2c subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ff002e4f-2887-4534-a5b0-d8d5ee75f8bf k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f5357f388a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2137 identity=23498 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-dkh2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 23556607-5ad9-4006-9ce7-df5936c0783e default }" containerID=a1638cb40b730a9203d494495e716cace51dc330e66caa1b3d70a5ca9cf034a4 datapathConfiguration="&{false false false false false }" interface=lxc5a815e84d445 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rvmn2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1638cb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rvmn2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1638cb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rvmn2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1638cb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identity=37907 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rvmn2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1638cb40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identity=37907 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rvmn2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 5daee901-5b25-4035-90d1-6b50bac84e94 default }" containerID=0606edb643e96c56638d5261e393bea6735201b393a8b17a86f601c120902e15 datapathConfiguration="&{false false false false false }" interface=lxc01ae503e632e k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-sp7r2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0606edb643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-sp7r2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0606edb643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-sp7r2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0606edb643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=6156 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-sp7r2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0606edb643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=6156 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-sp7r2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1638cb40b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1999 identity=37907 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rvmn2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1638cb40b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1999 identity=37907 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rvmn2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.243 ca318cdf-cc0e-4758-ab52-fb5fe80a8563 default }" containerID=6bc95062fdbb45fe008203bd33060de0835f19483648a741de635f129f2e4473 datapathConfiguration="&{false false false false false }" interface=lxcca38bf1fa618 k8sPodName=monitoring/kube-prometheus-stack-grafana-68784d59cd-29z9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bc95062fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68784d59cd-29z9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bc95062fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68784d59cd-29z9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bc95062fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=2494 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68784d59cd-29z9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bc95062fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=2494 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68784d59cd-29z9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0606edb643 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=34 identity=6156 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-sp7r2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0606edb643 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=34 identity=6156 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-sp7r2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6bc95062fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1861 identity=2494 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68784d59cd-29z9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bc95062fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=2494 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-68784d59cd-29z9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 8d528c3f-9d3f-4edb-9d43-3f6f742e8b3f default }" containerID=cc355c4e748bf47b0702936104dc6a4613d0cdbb8fef6a3b8348aad4bf89af04 datapathConfiguration="&{false false false false false }" interface=lxcc818ab22455d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc355c4e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc355c4e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc355c4e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=13190 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc355c4e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1280 identity=13190 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc355c4e74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1280 identity=13190 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc355c4e74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1280 identity=13190 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc355c4e74 endpointID=1280 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-ml2xb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=2606eb72-b490-4531-9c4e-df9cb7dbde89 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=cc355c4e74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1280 identity=13190 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ml2xb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 c1f344b1-f18f-419c-bb54-c6ce1121f4f7 default }" containerID=f4f3c216ca360737ed80720c46b8759a00f72b1695b90c99f3eb3b27545bab05 datapathConfiguration="&{false false false false false }" interface=lxc68f2d33cb4b3 k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4f3c216ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4f3c216ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4f3c216ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4f3c216ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2344 identity=9178 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4f3c216ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2344 identity=9178 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4f3c216ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2344 identity=9178 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.91 491909d9-0a13-4644-a218-9c5b3fcbc72f default }" containerID=0f17320950aea987bcc28632e085ff603cce42085cd52ffe5192e75fbe17562c datapathConfiguration="&{false false false false false }" interface=lxcf4084f3e92ec k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f17320950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f17320950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0f17320950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f17320950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identity=9178 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f17320950 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3984 identity=9178 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f17320950 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3984 identity=9178 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 subsys=daemon level=info msg="Delete endpoint request" containerID=f4f3c216ca endpointID=2344 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f4f3c216ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2344 identity=9178 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-588ff08a-3644-4436-b9b6-29d171291a49 subsys=endpoint level=info msg="Delete endpoint request" containerID=0f17320950 endpointID=3984 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0f17320950 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3984 identity=9178 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76808ae3-f465-414b-959e-ca3b250bc2d3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 dd638d9c-901b-4576-8589-50a394a33bc7 default }" containerID=6ac7040cd99e9b79292956655a6083c470536aa2e2e1ed5953805d38b56832df datapathConfiguration="&{false false false false false }" interface=lxc01adc0afa062 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ac7040cd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ac7040cd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6ac7040cd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=35685 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ac7040cd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=35685 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ac7040cd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1740 identity=35685 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ac7040cd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1740 identity=35685 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 f180f772-1465-4d20-8289-889d91ae0552 default }" containerID=cad251157305183d417fcdd484fd23be5314cbf3c754a80ff5fc42c65b2e5582 datapathConfiguration="&{false false false false false }" interface=lxc0cece9aa38c6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cad2511573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cad2511573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cad2511573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=29402 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cad2511573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=29402 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cad2511573 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=919 identity=29402 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cad2511573 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=29402 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 68d02246-e0a9-457d-826f-d99800491846 default }" containerID=569c73f9bf56b91c20dc378a872af72878fde837aa3f2002cd6e3455a61070be datapathConfiguration="&{false false false false false }" interface=lxcb862db5866db k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=569c73f9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=569c73f9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=569c73f9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=19005 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=569c73f9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=19005 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 1aafad18-6c42-46b0-9be5-444d5f521748 default }" containerID=bd43a9a7fd9dd2782a2e34471239c0ad53c940d32c199325bc29e4420806d81b datapathConfiguration="&{false false false false false }" interface=lxc01d72428ba02 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd43a9a7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd43a9a7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd43a9a7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=5047 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd43a9a7fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=5047 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 8c0dc695-4437-4ece-ac56-0d0f5c33f3d8 default }" containerID=e1922902f58076e21c88581421cb346a3621c4b6cc98e512467df45ebe278581 datapathConfiguration="&{false false false false false }" interface=lxc5619a25ba0ce k8sPodName=monitoring/loki-gateway-cf54cb88c-6nf5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1922902f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6nf5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1922902f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6nf5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1922902f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=15843 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6nf5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1922902f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=15843 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6nf5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=569c73f9bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1909 identity=19005 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=569c73f9bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1909 identity=19005 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bd43a9a7fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3399 identity=5047 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd43a9a7fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3399 identity=5047 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 837cb8d1-74b1-4801-a88e-56fe4e621b8d default }" containerID=3675d49079e33b55edddea518b2f5bc24930cf1a139264dec5339509d4ec3df3 datapathConfiguration="&{false false false false false }" interface=lxc055c6704c760 k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3675d49079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3675d49079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3675d49079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3675d49079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=9178 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1922902f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=15843 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6nf5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1922902f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=15843 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-6nf5v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3675d49079 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2639 identity=9178 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3675d49079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=9178 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 1638c868-d0b4-4384-aee9-8cf8588ab73c default }" containerID=88e4ac2e0ca896363220e57b554d2521f81756d7689f1f8cb18de7a206e3246e datapathConfiguration="&{false false false false false }" interface=lxc86527835e9dd k8sPodName=monitoring/vector-z52br labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88e4ac2e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-z52br subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88e4ac2e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-z52br subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=3675d49079 endpointID=2639 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88e4ac2e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=6818 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-z52br oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88e4ac2e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=6818 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-z52br subsys=endpoint level=info msg="Removed endpoint" containerID=3675d49079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=9178 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d43ec232-ec6f-4aa1-8cea-137ca20c07eb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88e4ac2e0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=31 identity=6818 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-z52br subsys=endpoint level=info msg="Successful endpoint creation" containerID=88e4ac2e0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=6818 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/vector-z52br subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 44d81a54-f269-45b1-bbec-09251a19b0f4 default }" containerID=0fd3b583c53eddd5b11c4b93f2db704ab730fab27a06b11009a1d175a8848ac0 datapathConfiguration="&{false false false false false }" interface=lxc8323d282217f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fd3b583c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fd3b583c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0fd3b583c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fd3b583c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=29556 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fd3b583c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=29556 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fd3b583c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=46 identity=29556 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fd3b583c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=46 identity=29556 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 5ae9964a-02b7-4b11-a0d4-62c081e65259 default }" containerID=0c8394f403d3bdf613068ae0d9ee3710c4315b03052b720c2a43f5528c5714d0 datapathConfiguration="&{false false false false false }" interface=lxc337117d1f52c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6xzkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c8394f403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6xzkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c8394f403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6xzkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c8394f403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=55376 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6xzkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c8394f403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=55376 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6xzkd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0c8394f403 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3752 identity=55376 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6xzkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c8394f403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=55376 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6xzkd subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 2e76d012-e198-46b7-9276-80bff97352f0 default }" containerID=8ef8d75469cf73365c4993cbe925ecc987a52e0eff440f690b8b6e1d0cf77b46 datapathConfiguration="&{false false false false false }" interface=lxcdaa32c013242 k8sPodName=openstack/memcached-memcached-6479589586-v54cz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ef8d75469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v54cz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ef8d75469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v54cz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ef8d75469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v54cz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ef8d75469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=10864 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v54cz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ef8d75469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=10864 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v54cz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ef8d75469 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=634 identity=10864 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v54cz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ef8d75469 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=10864 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v54cz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 30d8a71f-bb07-4291-97c3-b44ac4179c96 default }" containerID=ef40beda8b4fa19a01c3a0c469fd69b751591c3aa3eeffb4225656d81c40bdb6 datapathConfiguration="&{false false false false false }" interface=lxc6eb6998faea0 k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef40beda8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef40beda8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef40beda8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef40beda8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=9178 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef40beda8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1732 identity=9178 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef40beda8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1732 identity=9178 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c subsys=daemon level=info msg="Delete endpoint request" containerID=ef40beda8b endpointID=1732 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ef40beda8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1732 identity=9178 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1b216e1f-0245-4853-898a-08a173b6e70c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 b8211a47-0505-41ce-9bef-912ad9535c47 default }" containerID=d9fe3f8cb74195079a8b22a9be8d3f0d20b97c3d27c50546cd674cd189f7abab datapathConfiguration="&{false false false false false }" interface=lxc833187520223 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9fe3f8cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9fe3f8cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d9fe3f8cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d9fe3f8cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=60207 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9fe3f8cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1067 identity=60207 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9fe3f8cb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1067 identity=60207 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9fe3f8cb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1067 identity=60207 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 7461feb7-39a0-4f4b-86c1-3c95a5626ebf default }" containerID=5ba03a7caa6be765476877b10a940d40a01b11d749d0bd60c697e43e3f91e328 datapathConfiguration="&{false false false false false }" interface=lxc687739b8c8ca k8sPodName=openstack/keystone-api-6878c7bc85-vkqnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ba03a7caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-6878c7bc85-vkqnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ba03a7caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-6878c7bc85-vkqnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ba03a7caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=54398 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-6878c7bc85-vkqnd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5ba03a7caa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=54398 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-6878c7bc85-vkqnd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 c9472942-809e-4c3e-8fdc-79ee3e62c558 default }" containerID=f23995ee3d510afec919d85f0164574c433e7747fa8fb515e52e76068c938b5f datapathConfiguration="&{false false false false false }" interface=lxcf6070152f9a8 k8sPodName=openstack/keystone-credential-setup-vr7hw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f23995ee3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-credential-setup-vr7hw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f23995ee3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-credential-setup-vr7hw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f23995ee3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=5229 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-credential-setup-vr7hw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f23995ee3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=5229 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-credential-setup-vr7hw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ba03a7caa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=54398 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-6878c7bc85-vkqnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ba03a7caa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=54398 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-6878c7bc85-vkqnd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f23995ee3d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1174 identity=5229 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-credential-setup-vr7hw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f23995ee3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1174 identity=5229 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-credential-setup-vr7hw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f23995ee3d endpointID=1174 k8sNamespace=openstack k8sPodName=keystone-credential-setup-vr7hw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=48393bd2-4229-4ab0-aaac-e11b19fa3ed9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f23995ee3d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1174 identity=5229 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-credential-setup-vr7hw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 dfa8f1f7-9835-49c0-a33b-8f15b8129530 default }" containerID=5c4fd679b67af56853c35835864605ec241ea81ad8a35dc770e04a07190fb4a4 datapathConfiguration="&{false false false false false }" interface=lxc70e984a07c52 k8sPodName=openstack/keystone-db-init-9kj6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c4fd679b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-db-init-9kj6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c4fd679b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-db-init-9kj6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c4fd679b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=61927 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-db-init-9kj6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c4fd679b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=61927 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-db-init-9kj6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c4fd679b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=413 identity=61927 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-db-init-9kj6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c4fd679b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=413 identity=61927 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-db-init-9kj6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c4fd679b6 endpointID=413 k8sNamespace=openstack k8sPodName=keystone-db-init-9kj6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=5b6d4e13-b89d-4ab9-8006-0c176e8c5257 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5c4fd679b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=413 identity=61927 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-db-init-9kj6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 71bb4eae-dbd6-450d-8dfb-23f6d24cb4e2 default }" containerID=db46efdfd7f9cc800184ab0a73ceb3d4520824dcfd83a20fd2a43ab9feba5ddc datapathConfiguration="&{false false false false false }" interface=lxc851db0195282 k8sPodName=openstack/keystone-fernet-setup-tlhm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db46efdfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-fernet-setup-tlhm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db46efdfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-fernet-setup-tlhm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db46efdfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=51563 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-fernet-setup-tlhm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db46efdfd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=51563 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-fernet-setup-tlhm2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=db46efdfd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=55 identity=51563 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-fernet-setup-tlhm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db46efdfd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=51563 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-fernet-setup-tlhm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db46efdfd7 endpointID=55 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-tlhm2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=291cf8c8-abcf-4f98-97eb-58ebe21f8ac7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=db46efdfd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=51563 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/keystone-fernet-setup-tlhm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 fcdbb208-2e57-4fc5-900f-cf5fb97c2605 default }" containerID=d41376cf82f34944653cde261ab7069de9bcf9454b787c945c7cdba24202401b datapathConfiguration="&{false false false false false }" interface=lxc2137729b66c2 k8sPodName=openstack/keystone-db-sync-wbwtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d41376cf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-db-sync-wbwtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d41376cf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-db-sync-wbwtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d41376cf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=36644 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-db-sync-wbwtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d41376cf82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=36644 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-db-sync-wbwtf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d41376cf82 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=242 identity=36644 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-db-sync-wbwtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d41376cf82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=242 identity=36644 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-db-sync-wbwtf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d41376cf82 endpointID=242 k8sNamespace=openstack k8sPodName=keystone-db-sync-wbwtf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9afb529b-ce73-4a01-8d8d-ca7ed7390522 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d41376cf82 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=242 identity=36644 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-db-sync-wbwtf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 73481fb8-3220-472e-9a13-ada13c7d67d2 default }" containerID=203cf0ce481d410540152c5d25835435aecd36257c8a28b77b09d15fdddb89e4 datapathConfiguration="&{false false false false false }" interface=lxc44aa45c3302f k8sPodName=openstack/keystone-rabbit-init-sc8gb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=203cf0ce48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-rabbit-init-sc8gb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=203cf0ce48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-rabbit-init-sc8gb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=203cf0ce48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=20593 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-rabbit-init-sc8gb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=203cf0ce48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=20593 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-rabbit-init-sc8gb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=203cf0ce48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=518 identity=20593 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-rabbit-init-sc8gb subsys=endpoint level=info msg="Successful endpoint creation" containerID=203cf0ce48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=518 identity=20593 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-rabbit-init-sc8gb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=203cf0ce48 endpointID=518 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-sc8gb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4be58cab-0322-42dd-a791-e55b7479c7c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=203cf0ce48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=518 identity=20593 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-rabbit-init-sc8gb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 d0f0b687-303a-412a-aa39-a7feea88dcc9 default }" containerID=8bbc88e886b8610aeeddb81273c69ad01fd5809a2fceaac5d13798eef43a6787 datapathConfiguration="&{false false false false false }" interface=lxc8ed8922cc633 k8sPodName=openstack/keystone-domain-manage-8ffdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bbc88e886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-domain-manage-8ffdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bbc88e886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=302241d2-70c0-4372-88c9-751537b1adaa,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=302241d2-70c0-4372-88c9-751537b1adaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-domain-manage-8ffdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=302241d2-70c0-4372-88c9-751537b1adaa;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=302241d2-70c0-4372-88c9-751537b1adaa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8bbc88e886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 identity=12661 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=302241d2-70c0-4372-88c9-751537b1adaa,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=302241d2-70c0-4372-88c9-751537b1adaa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-domain-manage-8ffdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bbc88e886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 identity=12661 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-domain-manage-8ffdx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bbc88e886 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2671 identity=12661 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-domain-manage-8ffdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bbc88e886 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2671 identity=12661 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-domain-manage-8ffdx subsys=daemon level=info msg="Delete endpoint request" containerID=8bbc88e886 endpointID=2671 k8sNamespace=openstack k8sPodName=keystone-domain-manage-8ffdx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=302241d2-70c0-4372-88c9-751537b1adaa k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=302241d2-70c0-4372-88c9-751537b1adaa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8bbc88e886 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2671 identity=12661 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-domain-manage-8ffdx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 8fd0d95f-a3fa-42ba-87cb-b774e400a678 default }" containerID=842c982ae68815e33eb2a84956e1ab3f0fb0bbedcf30f0b1e7f464a3b38d43da datapathConfiguration="&{false false false false false }" interface=lxc6d806f0ecffa k8sPodName=openstack/keystone-bootstrap-zwwlr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=842c982ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-bootstrap-zwwlr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=842c982ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-bootstrap-zwwlr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=842c982ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=1446 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-bootstrap-zwwlr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=842c982ae6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=1446 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-bootstrap-zwwlr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=842c982ae6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3074 identity=1446 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-bootstrap-zwwlr subsys=endpoint level=info msg="Successful endpoint creation" containerID=842c982ae6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3074 identity=1446 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-bootstrap-zwwlr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=842c982ae6 endpointID=3074 k8sNamespace=openstack k8sPodName=keystone-bootstrap-zwwlr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=71130b72-c710-4a2a-a29b-76e8bc95ac92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=842c982ae6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3074 identity=1446 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-bootstrap-zwwlr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 be698470-f5d6-4124-91a8-365663c00c4d default }" containerID=c1d7e662369de568c64768c2297a51bfedc10c32daf5b7187da80a9c305ad970 datapathConfiguration="&{false false false false false }" interface=lxc2727011fcf5e k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1d7e66236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1d7e66236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1d7e66236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1d7e66236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2456 identity=9178 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1d7e66236 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2456 identity=9178 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1d7e66236 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2456 identity=9178 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 subsys=daemon level=info msg="Delete endpoint request" containerID=c1d7e66236 endpointID=2456 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c1d7e66236 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2456 identity=9178 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4a5d7546-568f-4410-99f8-ae0c64fd5692 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 25595bc7-f8f8-4f21-8b9d-04b970491cce default }" containerID=85c32f0185d03a581a55f8d019b13c7202bc4189502cf1c360e8e457ce35ee26 datapathConfiguration="&{false false false false false }" interface=lxc32b09d1a780e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85c32f0185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85c32f0185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=85c32f0185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85c32f0185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=24978 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85c32f0185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=24978 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85c32f0185 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=195 identity=24978 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85c32f0185 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=195 identity=24978 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 fe4ad5cc-0360-4f62-bb54-0e5a1ca74dbe default }" containerID=fc13e467c5c0870d8f4b0e78dc18e0c5aa8bd6a3c3bb69db8c8192b7a3b1a7c2 datapathConfiguration="&{false false false false false }" interface=lxc760ea3539226 k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc13e467c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc13e467c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fc13e467c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc13e467c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=52453 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc13e467c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=52453 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 dad0851a-c3a3-450d-904a-f0f8c0ff4f6a default }" containerID=19fbf079a73fedbead314408d0d2272db84648a91cf92964168c9f365597eaee datapathConfiguration="&{false false false false false }" interface=lxc6875c18b9bc5 k8sPodName=openstack/barbican-db-init-cstjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19fbf079a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-cstjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19fbf079a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-cstjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19fbf079a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=36582 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-cstjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19fbf079a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=36582 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-cstjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc13e467c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=779 identity=52453 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc13e467c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=52453 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-api-6d8d999b9b-lq8mb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19fbf079a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=841 identity=36582 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-cstjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=19fbf079a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=36582 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-cstjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19fbf079a7 endpointID=841 k8sNamespace=openstack k8sPodName=barbican-db-init-cstjm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=597596af-4b3c-44c3-a201-e164e6fd906f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=19fbf079a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=841 identity=36582 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-db-init-cstjm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 ab13ad5e-4b2d-42fd-aba2-6309bea3c841 default }" containerID=8118cf7ede2611c90044b4457355bb113f70bf8c2aefdee72f2e7b7ba8634065 datapathConfiguration="&{false false false false false }" interface=lxca819bc3b9846 k8sPodName=openstack/barbican-db-sync-vh2vb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8118cf7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-db-sync-vh2vb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8118cf7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-db-sync-vh2vb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8118cf7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=19686 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-db-sync-vh2vb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8118cf7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=19686 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-db-sync-vh2vb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8118cf7ede datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=166 identity=19686 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-db-sync-vh2vb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8118cf7ede datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=19686 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-db-sync-vh2vb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8118cf7ede endpointID=166 k8sNamespace=openstack k8sPodName=barbican-db-sync-vh2vb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a91925bc-bb3d-47a2-80d5-797e04ed0c7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8118cf7ede datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=19686 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/barbican-db-sync-vh2vb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 00b643e9-76ef-44f6-8b81-6b9c9b47287e default }" containerID=2f52b26d4992efe1e2d841c72f487c5305cccdb6fe9eb466b35374b220bba1af datapathConfiguration="&{false false false false false }" interface=lxc3ce89c781f3d k8sPodName=openstack/barbican-rabbit-init-qgzzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f52b26d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-qgzzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f52b26d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=66839633-169e-446a-964c-cae9e1b39a2d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=66839633-169e-446a-964c-cae9e1b39a2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-qgzzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=66839633-169e-446a-964c-cae9e1b39a2d;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=66839633-169e-446a-964c-cae9e1b39a2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f52b26d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=19291 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=66839633-169e-446a-964c-cae9e1b39a2d,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=66839633-169e-446a-964c-cae9e1b39a2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-qgzzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f52b26d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=19291 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-qgzzt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2f52b26d49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=951 identity=19291 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-qgzzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f52b26d49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=951 identity=19291 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-qgzzt subsys=daemon level=info msg="Delete endpoint request" containerID=2f52b26d49 endpointID=951 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-qgzzt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=66839633-169e-446a-964c-cae9e1b39a2d k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=66839633-169e-446a-964c-cae9e1b39a2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2f52b26d49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=951 identity=19291 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-qgzzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 293ad312-a944-4c60-a98b-2632783a2acc default }" containerID=d90ce0ffcfcf6a1a1d7a842e22c866d73dd9a9de82dcadfb15ddadf6f7d26d9f datapathConfiguration="&{false false false false false }" interface=lxcf931b775dbad k8sPodName=openstack/barbican-ks-service-pkscz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d90ce0ffcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-service-pkscz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d90ce0ffcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=83057e77-e5ec-4670-a227-80f23692b01f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=83057e77-e5ec-4670-a227-80f23692b01f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-service-pkscz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=83057e77-e5ec-4670-a227-80f23692b01f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=83057e77-e5ec-4670-a227-80f23692b01f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d90ce0ffcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identity=6192 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=83057e77-e5ec-4670-a227-80f23692b01f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=83057e77-e5ec-4670-a227-80f23692b01f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-service-pkscz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d90ce0ffcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identity=6192 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-service-pkscz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d90ce0ffcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3064 identity=6192 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-service-pkscz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d90ce0ffcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3064 identity=6192 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-service-pkscz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d90ce0ffcf endpointID=3064 k8sNamespace=openstack k8sPodName=barbican-ks-service-pkscz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=83057e77-e5ec-4670-a227-80f23692b01f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=83057e77-e5ec-4670-a227-80f23692b01f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d90ce0ffcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3064 identity=6192 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/barbican-ks-service-pkscz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 0ea4598e-b6d8-4d9e-b1be-062a9a26356e default }" containerID=01f01f34d0cfa0fa25236e32ee8502d34b0f6d5ea502baa80b5ed6b7f180a4f7 datapathConfiguration="&{false false false false false }" interface=lxc6f1bc125aa75 k8sPodName=openstack/barbican-ks-endpoints-pkcgs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01f01f34d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pkcgs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01f01f34d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pkcgs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01f01f34d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=22550 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pkcgs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01f01f34d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=22550 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pkcgs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01f01f34d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1285 identity=22550 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pkcgs subsys=endpoint level=info msg="Successful endpoint creation" containerID=01f01f34d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1285 identity=22550 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pkcgs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036106564583981496 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=01f01f34d0 endpointID=1285 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-pkcgs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bb65e338-a74d-4e4c-a559-1ee05ea4cb56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=01f01f34d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1285 identity=22550 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pkcgs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 86f1ec1e-05f1-48a7-b73e-556135635bb8 default }" containerID=27724cfb2d25c14bbd7c80e6a378a7eeb31f52efac9937a2b5a447ca8d42b648 datapathConfiguration="&{false false false false false }" interface=lxc49749e683d80 k8sPodName=openstack/barbican-ks-user-s9mlp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27724cfb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27724cfb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=27724cfb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=27724cfb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 identity=18375 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27724cfb2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 identity=18375 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27724cfb2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2026 identity=18375 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp subsys=endpoint level=info msg="Successful endpoint creation" containerID=27724cfb2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2026 identity=18375 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=27724cfb2d endpointID=2026 k8sNamespace=openstack k8sPodName=barbican-ks-user-s9mlp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a38b15c3-46f1-4a2c-9707-44b9f83cebcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=27724cfb2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2026 identity=18375 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-user-s9mlp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.114 036fb5db-f707-4352-9fa8-700d94566f73 default }" containerID=caaeea21eebad54a7b5fceb1e27af5056387013ba08acc4bf8a51222393e463b datapathConfiguration="&{false false false false false }" interface=lxcaf055f780e43 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-nzlmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caaeea21ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-nzlmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caaeea21ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-nzlmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=caaeea21ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=9480 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-nzlmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caaeea21ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=9480 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-nzlmw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caaeea21ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=111 identity=9480 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-nzlmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=caaeea21ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=9480 ipv4=10.0.0.114 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-nzlmw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 751c8d99-036d-4ac6-adef-56aa9dda8906 default }" containerID=dc065529a35d6c26a2a085a55116e41c5ee09ac85d7ddbef1d8f7ef28ccf3f41 datapathConfiguration="&{false false false false false }" interface=lxc862f2ccf4d67 k8sPodName=openstack/rook-ceph-detect-version-vkmtq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc065529a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc065529a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc065529a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc065529a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identity=32022 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc065529a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identity=32022 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc065529a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3505 identity=32022 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc065529a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3505 identity=32022 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc065529a3 endpointID=3505 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-vkmtq subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b1f1e8b1-ab8e-4ee4-8149-5468fd8ce5aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=dc065529a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3505 identity=32022 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vkmtq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 6deae7f9-bd38-4411-99d2-b2946b0b6136 default }" containerID=e31a60d96cf81ee268a93dbc2f70dfd32cb51a90f0595bff9d6e09d85e80f163 datapathConfiguration="&{false false false false false }" interface=lxcba3b4641b4f0 k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e31a60d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e31a60d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e31a60d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e31a60d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=12405 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e31a60d96c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=12405 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e31a60d96c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1628 identity=12405 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e31a60d96c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1628 identity=12405 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 f5103c2f-8d08-4c7a-9baa-86f3fb8f6001 default }" containerID=79a90b17de4e5e658eff0d3b916e19afedc059d18b31092ec2d615fe0c5ccd58 datapathConfiguration="&{false false false false false }" interface=lxc48eba1bdb092 k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79a90b17de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79a90b17de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79a90b17de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 identity=9178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79a90b17de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1348 identity=9178 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79a90b17de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1348 identity=9178 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79a90b17de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1348 identity=9178 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 subsys=daemon level=info msg="Delete endpoint request" containerID=e31a60d96c endpointID=1628 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-nsbd9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b8759399-5885-4347-a544-4e3f8cd72bf7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e31a60d96c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1628 identity=12405 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nsbd9 subsys=endpoint level=info msg="Delete endpoint request" containerID=79a90b17de endpointID=1348 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=79a90b17de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1348 identity=9178 ipv4=10.0.0.12 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3599a1f7-aac7-4f24-9daf-0994d50e5308 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 81f9f888-b745-4bd0-9d09-e53497bb554c default }" containerID=13515e732ae2d391ba4b5aa31ba21f9c95590a3ec295b7f4cad63b3d0440eb9e datapathConfiguration="&{false false false false false }" interface=lxc92a3e15752a4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13515e732a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13515e732a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13515e732a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=5768 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13515e732a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1048 identity=5768 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13515e732a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1048 identity=5768 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13515e732a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1048 identity=5768 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 cecf2f9f-06d0-40b6-9434-8d8c52ca4c04 default }" containerID=5b0891555d5bedf89f8d56342e222bf1d80ca4cc4c32dcef26ab98a8b4db8112 datapathConfiguration="&{false false false false false }" interface=lxced3777a8ec25 k8sPodName=openstack/glance-db-init-km6q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b0891555d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b0891555d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5b0891555d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b0891555d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=3707 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b0891555d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=3707 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b0891555d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=3707 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b0891555d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=3707 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b0891555d endpointID=526 k8sNamespace=openstack k8sPodName=glance-db-init-km6q6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=21ef3121-0777-4cff-aeae-677e863cf77a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5b0891555d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=3707 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/glance-db-init-km6q6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 56f2f946-ece2-4cda-ac53-5268dde09e7a default }" containerID=3b1272ba765e138d054b93b07696446e1ffd5d9fd559e865424ceffad23d28c8 datapathConfiguration="&{false false false false false }" interface=lxc1177190aed9d k8sPodName=openstack/glance-db-sync-2f7zc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b1272ba76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-2f7zc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b1272ba76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-2f7zc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b1272ba76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=36022 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-2f7zc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b1272ba76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=36022 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-2f7zc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b1272ba76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1976 identity=36022 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-2f7zc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b1272ba76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=36022 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-2f7zc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 1092dba6-b5f9-4c50-b9e9-28b7585d5c07 default }" containerID=34062882d6f87e16ccdff7830e278072f0d8bd5d2efd5a8f88e3454e829fbd4b datapathConfiguration="&{false false false false false }" interface=lxc513cb37bf083 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tpzzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34062882d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tpzzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34062882d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tpzzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34062882d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 identity=3560 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tpzzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34062882d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1749 identity=3560 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tpzzk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 c0ef5998-beb1-40ce-aa0f-dffe4b8e3cea default }" containerID=aa389cfe308596eefb33defff4b4c082c6815052c9086c179887c793111d1674 datapathConfiguration="&{false false false false false }" interface=lxc7f62674d81b2 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2x7sf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa389cfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2x7sf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa389cfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2x7sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa389cfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=40479 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2x7sf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa389cfe30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3259 identity=40479 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2x7sf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34062882d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1749 identity=3560 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tpzzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=34062882d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1749 identity=3560 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-tpzzk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aa389cfe30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3259 identity=40479 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2x7sf subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa389cfe30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3259 identity=40479 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2x7sf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b1272ba76 endpointID=1976 k8sNamespace=openstack k8sPodName=glance-db-sync-2f7zc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=bfefd890-be69-4732-809b-ff39fbe54cb7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3b1272ba76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1976 identity=36022 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-db-sync-2f7zc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 a96d3e9c-40a1-4839-af68-95212a52be27 default }" containerID=f661bd69dc88bc49b8fb444975922b8047812b7b583ed9333887ccfdb9d0e432 datapathConfiguration="&{false false false false false }" interface=lxc18860fa885ff k8sPodName=openstack/glance-rabbit-init-bcql6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f661bd69dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-bcql6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f661bd69dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-bcql6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f661bd69dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=28774 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-bcql6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f661bd69dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=28774 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-bcql6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f661bd69dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=675 identity=28774 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-bcql6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f661bd69dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=675 identity=28774 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-bcql6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f661bd69dc endpointID=675 k8sNamespace=openstack k8sPodName=glance-rabbit-init-bcql6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a53c8aef-ae82-4599-8a29-01e03568f268 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f661bd69dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=675 identity=28774 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-rabbit-init-bcql6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 9bd82794-12ce-44ea-9dce-5a2ad57b669b default }" containerID=b555aae024401e4fea53d9937ece01ed23567638cb898bd3857e54ba4d52a648 datapathConfiguration="&{false false false false false }" interface=lxc8c7600a6d91a k8sPodName=openstack/glance-ks-service-96jhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b555aae024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b555aae024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b555aae024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b555aae024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=31568 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b555aae024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=31568 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b555aae024 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=216 identity=31568 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=b555aae024 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=31568 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b555aae024 endpointID=216 k8sNamespace=openstack k8sPodName=glance-ks-service-96jhf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=30aa0a99-ca23-4f72-bbe7-6ce707380a87 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b555aae024 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=216 identity=31568 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-96jhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 a4ed5676-a55d-42c2-836e-06bae452c34c default }" containerID=01b81a4840b95211e86bab7ec997f91625e4823c017c1223d6b8beb0958442fc datapathConfiguration="&{false false false false false }" interface=lxc19454bd74f6d k8sPodName=openstack/glance-ks-endpoints-kh4hn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01b81a4840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01b81a4840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=01b81a4840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01b81a4840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=11984 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01b81a4840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=11984 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01b81a4840 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=540 identity=11984 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn subsys=endpoint level=info msg="Successful endpoint creation" containerID=01b81a4840 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=540 identity=11984 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01b81a4840 endpointID=540 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kh4hn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=dfd13089-9a0d-40a6-8bc2-2f0a488a1423 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=01b81a4840 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=540 identity=11984 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-ks-endpoints-kh4hn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 15746a55-1a86-43b8-9141-be701af5e0b5 default }" containerID=e811ad2b5c218c955bf05cc7cc1c776a3b92f205e86d87ff79b4808c56c8d50d datapathConfiguration="&{false false false false false }" interface=lxc5651a9a527ce k8sPodName=openstack/glance-ks-user-grdgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e811ad2b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e811ad2b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=744a01a2-e62c-4394-a756-c16335feb950,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=744a01a2-e62c-4394-a756-c16335feb950,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e811ad2b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=744a01a2-e62c-4394-a756-c16335feb950;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=744a01a2-e62c-4394-a756-c16335feb950;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e811ad2b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identity=37877 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=744a01a2-e62c-4394-a756-c16335feb950,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=744a01a2-e62c-4394-a756-c16335feb950,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e811ad2b5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identity=37877 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e811ad2b5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3069 identity=37877 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e811ad2b5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3069 identity=37877 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e811ad2b5c endpointID=3069 k8sNamespace=openstack k8sPodName=glance-ks-user-grdgc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=744a01a2-e62c-4394-a756-c16335feb950 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=744a01a2-e62c-4394-a756-c16335feb950 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e811ad2b5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3069 identity=37877 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-ks-user-grdgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 725a09c7-aafa-4f6d-8267-fc7636d6d2fb default }" containerID=dcb50ef85769cbe639b37aef8af20ed924801e64e92e4acc916b154451e0c0f8 datapathConfiguration="&{false false false false false }" interface=lxc5b1f7d6923ee k8sPodName=openstack/glance-metadefs-load-4w62x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcb50ef857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-metadefs-load-4w62x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcb50ef857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-metadefs-load-4w62x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcb50ef857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=61251 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-metadefs-load-4w62x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcb50ef857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=61251 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-metadefs-load-4w62x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dcb50ef857 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=301 identity=61251 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-metadefs-load-4w62x subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcb50ef857 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=61251 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-metadefs-load-4w62x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dcb50ef857 endpointID=301 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4w62x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=8484014d-4bb1-4cb8-957d-a1239c6f6825 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dcb50ef857 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=61251 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-metadefs-load-4w62x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 e83faaef-b34f-48eb-b42d-d4c5f7a7641d default }" containerID=d26eca6977c7d864bb1a3fe6b6945f2ac909fb6907af19fdd5a2945223345c99 datapathConfiguration="&{false false false false false }" interface=lxcdfb2121a0c6f k8sPodName=openstack/glance-storage-init-ntgtn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d26eca6977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d26eca6977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d26eca6977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d26eca6977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=46788 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d26eca6977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1582 identity=46788 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d26eca6977 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1582 identity=46788 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d26eca6977 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1582 identity=46788 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d26eca6977 endpointID=1582 k8sNamespace=openstack k8sPodName=glance-storage-init-ntgtn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=cb076c48-9d46-42f6-8225-68d3dd9a6327 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d26eca6977 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1582 identity=46788 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-ntgtn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 9f0bcb4d-7d42-4b00-afc8-1e7410f3c22a default }" containerID=552827d642094be12ce3a54a4d8176a2f12be9301442b62814635d1cc309c01c datapathConfiguration="&{false false false false false }" interface=lxc80300bb48fe7 k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=552827d642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=552827d642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=552827d642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=552827d642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 identity=9012 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=552827d642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3380 identity=9012 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=552827d642 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3380 identity=9012 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=552827d642 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3380 identity=9012 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-api-7dfdd557d4-tpg9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 491df386-b6a1-4209-b0e6-1234293867b6 default }" containerID=a860b9c998b3726340a525785abeea8008dfa10986e3c9834489960bc4f3a93c datapathConfiguration="&{false false false false false }" interface=lxc7521ebc6ae78 k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a860b9c998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a860b9c998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a860b9c998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a860b9c998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=3334 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a860b9c998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1806 identity=3334 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 e805917b-e1ef-4d27-92df-dbe982f65ec7 default }" containerID=7379f60af6da0a75ceb02ac1505111f1a2595dfd14e09940a91e490e712abc43 datapathConfiguration="&{false false false false false }" interface=lxcffb954bac680 k8sPodName=openstack/staffeln-api-56c9f6988c-8qh2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7379f60af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-56c9f6988c-8qh2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7379f60af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-56c9f6988c-8qh2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.88 db470223-262c-4731-9178-4421cffb3d86 default }" containerID=70094e6c4c1afe94830e45b50aedfe215cf60f74e1bc6d6bde5c8ca7599ddc4e datapathConfiguration="&{false false false false false }" interface=lxccfcb3f0c5478 k8sPodName=openstack/staffeln-db-init-wk7v5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70094e6c4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-wk7v5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70094e6c4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-wk7v5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7379f60af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=2250 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-56c9f6988c-8qh2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7379f60af6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=2250 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-56c9f6988c-8qh2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70094e6c4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=40605 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-wk7v5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70094e6c4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=40605 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-wk7v5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a860b9c998 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1806 identity=3334 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a860b9c998 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1806 identity=3334 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-64b6749c4d-7ptmx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7379f60af6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1456 identity=2250 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-56c9f6988c-8qh2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7379f60af6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1456 identity=2250 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-56c9f6988c-8qh2r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=70094e6c4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1991 identity=40605 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-wk7v5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70094e6c4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=40605 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-wk7v5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70094e6c4c endpointID=1991 k8sNamespace=openstack k8sPodName=staffeln-db-init-wk7v5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=c7bc0b2d-9641-4f38-91f6-2756efe1258f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=70094e6c4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=40605 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-wk7v5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 1be3b9e2-2d67-404c-b6ce-4148a47c8782 default }" containerID=436d41eecd077cc307217a3c2db2e59d1d3dde72e1787e3699b85db9f6ac4089 datapathConfiguration="&{false false false false false }" interface=lxccaaa5f515f10 k8sPodName=openstack/staffeln-db-sync-pqw64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=436d41eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-db-sync-pqw64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=436d41eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ba1fe445-1686-495a-9284-24d21e722024,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ba1fe445-1686-495a-9284-24d21e722024,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-db-sync-pqw64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=436d41eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-db-sync-pqw64 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ba1fe445-1686-495a-9284-24d21e722024;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=ba1fe445-1686-495a-9284-24d21e722024;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=436d41eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=13186 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ba1fe445-1686-495a-9284-24d21e722024,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=ba1fe445-1686-495a-9284-24d21e722024,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-db-sync-pqw64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=436d41eecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=13186 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-db-sync-pqw64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=436d41eecd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=535 identity=13186 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-db-sync-pqw64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=436d41eecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=13186 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/staffeln-db-sync-pqw64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager