level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.034677ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="56.612µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.047788ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.4µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=90.90112ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.572µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.39µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="51.641µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="61.962µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="62.162µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="457.132µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.98µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.541792ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.233162ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="24.562µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="25.62µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="146.574µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="65.581µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="50.802µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.961314ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="93.072µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.531µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.221.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=106.378356ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="2.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.071206ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.979234ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.681µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="54.901µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.491µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="26.17µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="77.612µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="271.677µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.102µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="245.776µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="781.941µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.214121ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.18µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.701µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.221 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.221 ipAddr.ipv6="" k8sNodeIP=162.253.55.221 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.221" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.208" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.221" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.221} {CiliumInternalIP 10.0.0.208}] 10.0.0.0/24 [] [] 10.0.0.203 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38127" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.074290784s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="21.731µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.72µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="36.921µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.151µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2934 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.998736527s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.216 ac92f1be-864c-445b-8de1-3f4af805e0f1 default }" containerID=bd395d68a59aaca89aae44eea05251d23903a5577344237aa6b64e51326e3364 datapathConfiguration="&{false false false false false }" interface=lxc1efff502dc63 k8sPodName=kube-system/coredns-7c96b6546b-5qsfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd395d68a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 c8c046f3-c988-4f64-bd83-8ffc0ccf3c5f default }" containerID=b945b78a08f0bac978ef6fef26ebda83629ab03337f7c88dbad7945d97ea4fa4 datapathConfiguration="&{false false false false false }" interface=lxc48cf06876d16 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=bd395d68a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp subsys=endpoint level=info msg="New endpoint" containerID=b945b78a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3862 ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b945b78a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3862 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b945b78a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3862 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=bd395d68a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=bd395d68a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=24642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd395d68a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=24642 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b945b78a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3862 identity=22254 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b945b78a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3862 identity=22254 ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=314.025294ms file-path=/var/run/cilium/state/templates/1b61de0def9e5bf24bf0d02c940f8f39ce9eb50644de3ef1074e979e7443a77a/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2934 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.203 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="reserved:health" ipv4=10.0.0.203 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=4 identityLabels="reserved:health" ipv4=10.0.0.203 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.05685452s file-path=/var/run/cilium/state/templates/42f3b160dead28fc8f121fbb2a927d219f8410a83e81040962a8f9f09392bbbc/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=893 identity=4 ipv4=10.0.0.203 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd395d68a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=121 identity=24642 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd395d68a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=121 identity=24642 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b945b78a08 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3862 identity=22254 ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b945b78a08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3862 identity=22254 ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b945b78a08 endpointID=3862 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-hpn4v subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=4187f5bd-aa4a-4b72-b7f8-d964b7d213cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=b945b78a08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3862 identity=22254 ipv4=10.0.0.39 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hpn4v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 7a64a594-2da3-4bcd-b457-296f78bfd73f default }" containerID=879788845eba872cb42675da45eb0732ffcdc844127e8b5109bd5407277a7afa datapathConfiguration="&{false false false false false }" interface=lxc49dcbce22401 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gqcld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=879788845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gqcld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=879788845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gqcld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=879788845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=27960 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gqcld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=879788845e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1728 identity=27960 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gqcld subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=879788845e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1728 identity=27960 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gqcld subsys=endpoint level=info msg="Successful endpoint creation" containerID=879788845e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1728 identity=27960 ipv4=10.0.0.31 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gqcld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2934 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02934 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02934 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02934 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02934:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2934 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 1fe8ad48-3f8f-4d51-96c4-ff04f0c18627 default }" containerID=4c3738920b57aaddfa7766238a2510d1566acc4ab286c3bf25633e9c299409ee datapathConfiguration="&{false false false false false }" interface=lxc45fb6509cfbb k8sPodName=kube-system/coredns-67659f764b-h5zx4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c3738920b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-h5zx4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c3738920b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-h5zx4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4c3738920b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=24642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-h5zx4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c3738920b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=24642 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-h5zx4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c3738920b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=305 identity=24642 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-h5zx4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c3738920b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=305 identity=24642 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-h5zx4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 713acd2a-9cdf-491d-9696-7cd76ddf9098 default }" containerID=fc7bfc74ac24a2867b44dc9d177d2fb1407e3ed6505fdc7dd94a452b58031684 datapathConfiguration="&{false false false false false }" interface=lxcde35c3097bf2 k8sPodName=kube-system/coredns-67659f764b-g9h6h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc7bfc74ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-g9h6h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc7bfc74ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-g9h6h subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fc7bfc74ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=24642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-g9h6h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc7bfc74ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1478 identity=24642 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-g9h6h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc7bfc74ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1478 identity=24642 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-g9h6h subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc7bfc74ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1478 identity=24642 ipv4=10.0.0.104 ipv6= k8sPodName=kube-system/coredns-67659f764b-g9h6h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 ac002b40-0eea-48a7-9dec-798e1c629595 default }" containerID=ad9bc017d9144a3535320c4f56fc731ec80e0f8323a040af3f8a284d0f63d49d datapathConfiguration="&{false false false false false }" interface=lxce3fe4260dcc9 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qtdbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad9bc017d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qtdbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad9bc017d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qtdbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad9bc017d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=64139 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qtdbk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ad9bc017d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1107 identity=64139 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qtdbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad9bc017d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1107 identity=64139 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qtdbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad9bc017d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1107 identity=64139 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qtdbk subsys=daemon level=info msg="Delete endpoint request" containerID=bd395d68a5 endpointID=121 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-5qsfp subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=bd395d68a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=121 identity=24642 ipv4=10.0.0.216 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5qsfp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 5dea0d58-d173-4c9e-af35-69c9198f5254 default }" containerID=6966a72057edaa03d0e16c5759b7dd81e98363542dd10c3587bce8ab68d97c74 datapathConfiguration="&{false false false false false }" interface=lxc3b6c330a9448 k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6966a72057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 ipv4=10.0.0.55 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6966a72057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f85348bd-b059-4268-b12c-7607283342b6,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f85348bd-b059-4268-b12c-7607283342b6,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.55 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f85348bd-b059-4268-b12c-7607283342b6;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f85348bd-b059-4268-b12c-7607283342b6;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6966a72057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=26932 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f85348bd-b059-4268-b12c-7607283342b6,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f85348bd-b059-4268-b12c-7607283342b6,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.55 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6966a72057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=26932 ipv4=10.0.0.55 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 562adadf-21ac-43c7-81ad-650c2b89fbce default }" containerID=645ddfb922c3d4e520a452af8331f637451e5017c54d0bd84da31c9a2bd6ac64 datapathConfiguration="&{false false false false false }" interface=lxc29386fedbd66 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p8glz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=645ddfb922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p8glz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=645ddfb922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p8glz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=645ddfb922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=2091 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p8glz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=645ddfb922 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=2091 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p8glz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6966a72057 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2669 identity=26932 ipv4=10.0.0.55 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6966a72057 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2669 identity=26932 ipv4=10.0.0.55 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.213 d7b87b02-4399-45ad-bd57-0a323fc7319e default }" containerID=d69123ee1726f2766963d87dbe109df951fee7608941a77be9929c02c32bef3a datapathConfiguration="&{false false false false false }" interface=lxc4865084fc842 k8sPodName=cert-manager/cert-manager-75c4c745bc-gstbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d69123ee17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2882 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gstbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d69123ee17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2882 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gstbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d69123ee17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2882 identity=49309 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gstbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d69123ee17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2882 identity=49309 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gstbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=645ddfb922 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=24 identity=2091 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p8glz subsys=endpoint level=info msg="Successful endpoint creation" containerID=645ddfb922 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=24 identity=2091 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-p8glz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d69123ee17 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2882 identity=49309 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gstbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d69123ee17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2882 identity=49309 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gstbs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 d164d453-d96e-4021-ab9e-8111828fe091 default }" containerID=02e55dc58bfa5542e28518a70d01635e182bd043cc9b087a59f153175e51866b datapathConfiguration="&{false false false false false }" interface=lxc8b754c198778 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sl7fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02e55dc58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sl7fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02e55dc58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sl7fd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02e55dc58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=10499 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sl7fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02e55dc58b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=10499 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sl7fd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02e55dc58b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1882 identity=10499 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sl7fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=02e55dc58b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1882 identity=10499 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-sl7fd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6966a72057 endpointID=2669 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-zt4sn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f85348bd-b059-4268-b12c-7607283342b6 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f85348bd-b059-4268-b12c-7607283342b6 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=6966a72057 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2669 identity=26932 ipv4=10.0.0.55 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zt4sn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 a44ecb1b-7722-4836-bf37-3d82ef5cff3e default }" containerID=1bd3968eecd4a1ac212736aa310d05c937084a2cafaf533cb3ba7c5e69be29a9 datapathConfiguration="&{false false false false false }" interface=lxcda78755ac71e k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bd3968eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bd3968eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bd3968eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=3833 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1bd3968eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=915 identity=3833 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bd3968eec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=915 identity=3833 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bd3968eec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=915 identity=3833 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bd3968eec endpointID=915 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-pddbd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=24a5bae9-ecd9-46fa-9fff-b52f1269aacd k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=1bd3968eec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=915 identity=3833 ipv4=10.0.0.122 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pddbd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 526cab19-647d-4cb6-99e1-1638ec63ab26 default }" containerID=6a39e19b0af23c6b774f18ff149f5fc0635d30e6a6ca7123f820c51ad977fcb1 datapathConfiguration="&{false false false false false }" interface=lxcf33865cac6c7 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a39e19b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a39e19b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a39e19b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a39e19b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3538 identity=64339 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a39e19b0a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3538 identity=64339 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a39e19b0a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3538 identity=64339 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a39e19b0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3538 identity=64339 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wv6vm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 7721e360-40aa-4cc8-9045-13ba4aeffff5 default }" containerID=84a8c94bc8082b2213d0d8af396e5c723f48fc8a9302442c45154da020354386 datapathConfiguration="&{false false false false false }" interface=lxc78c0e8ff3167 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84a8c94bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84a8c94bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84a8c94bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=48895 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84a8c94bc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=48895 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=84a8c94bc8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=171 identity=48895 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84a8c94bc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=171 identity=48895 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84a8c94bc8 endpointID=171 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-zt8p6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c7166dee-6d8c-450d-b307-d0bd6a1fe984 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=84a8c94bc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=171 identity=48895 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-zt8p6 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3e7436ab-e542-4b45-bb5a-9fd1f45ba5e0] Description:}]" policyAddRequest=31227ede-de0c-4df7-a97f-7d693de46257 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=31227ede-de0c-4df7-a97f-7d693de46257 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fffea33e-b693-42e5-9ada-583ec9b7d923] Description:}]" policyAddRequest=02ecaf8b-da84-4f1a-8afa-2c977299daec subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=02ecaf8b-da84-4f1a-8afa-2c977299daec policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.84 76e239dd-15c3-462d-89ea-2ae239788e9c default }" containerID=f673f4af1818b037d03f39359b2c71b336690b9bd2319c39df7f791a28d5e1c3 datapathConfiguration="&{false false false false false }" interface=lxcef5707661b0e k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f673f4af18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f673f4af18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f673f4af18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f673f4af18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=21100 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f673f4af18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=21100 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f673f4af18 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2355 identity=21100 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f673f4af18 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2355 identity=21100 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mvsvr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 4f0a5f86-ef0b-4be1-b857-3d45f4c0d83f default }" containerID=ef953ff13cb3c35192705de093b36d1ca809cd069d3873aafaaa8614783dbb83 datapathConfiguration="&{false false false false false }" interface=lxc5d126f6eda9f k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ghqn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef953ff13c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ghqn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef953ff13c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ghqn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef953ff13c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=5614 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ghqn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef953ff13c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=5614 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ghqn8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef953ff13c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=574 identity=5614 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ghqn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef953ff13c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=574 identity=5614 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ghqn8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 fe46ed85-595d-4293-a88e-8d2795d71400 default }" containerID=e6e02cd7e103d0f958e3579144af018228f6bcc85dd76b95c784c07e633492ef datapathConfiguration="&{false false false false false }" interface=lxc9b006e5eee09 k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6e02cd7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3911 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6e02cd7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3911 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e6e02cd7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3911 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6e02cd7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3911 identity=17661 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6e02cd7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3911 identity=17661 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6e02cd7e1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3911 identity=17661 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6e02cd7e1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3911 identity=17661 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nm5k6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 11d0c8c0-b24e-471f-b586-5f8d4f44d615 default }" containerID=30deeba10312e39994d308ffb618214cca380726785d6f1134a1f19bd2f7ce27 datapathConfiguration="&{false false false false false }" interface=lxccfa93b771c40 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30deeba103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30deeba103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30deeba103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=728 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=30deeba103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=728 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30deeba103 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1184 identity=728 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30deeba103 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1184 identity=728 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 54edf778-b6d4-4b9a-ba8b-af45f258c39c default }" containerID=e8b5a2329d926cd59e6328aaa9f2b269c1eaf2b51a6e2f7fe926c8a612917421 datapathConfiguration="&{false false false false false }" interface=lxcf090391643f6 k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8b5a2329d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8b5a2329d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8b5a2329d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8b5a2329d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=1013 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8b5a2329d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=629 identity=1013 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8b5a2329d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=629 identity=1013 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8b5a2329d endpointID=629 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e8b5a2329d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=629 identity=1013 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1c68c418-88f1-4a53-af19-9647af07aef2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 167380bb-91b2-4b43-a0ba-a683bd683094 default }" containerID=0890e7495f1133fb0bf12fd00eabbb56ca3bf1dc762b8d673e9a747676137660 datapathConfiguration="&{false false false false false }" interface=lxcacd6c4253328 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0890e7495f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0890e7495f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0890e7495f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=47431 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0890e7495f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=47431 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0890e7495f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1185 identity=47431 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0890e7495f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1185 identity=47431 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e77599c4-e41b-412d-8e1c-779240b74cb4] Description:}]" policyAddRequest=f3e6db2e-a35f-4490-9cb4-9a65d82e259b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f3e6db2e-a35f-4490-9cb4-9a65d82e259b policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.92 ca93458d-5568-4ca5-a17a-329953997cc4 default }" containerID=6dcddab3f1be40dfc3121bb9c03212fc46dd8e07d35d0b95ac14055004b1b404 datapathConfiguration="&{false false false false false }" interface=lxc4718e9eccc0b k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dcddab3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dcddab3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dcddab3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dcddab3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 identity=1013 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6dcddab3f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1849 identity=1013 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dcddab3f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1849 identity=1013 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 subsys=daemon level=info msg="Delete endpoint request" containerID=6dcddab3f1 endpointID=1849 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6dcddab3f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1849 identity=1013 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-673c3c61-1a09-4487-8438-9813b0cd0f89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 cf2837ed-db25-414d-a051-1b82a1c5ffaf default }" containerID=af6c9a98459000c0b5d47c561ec56aa4c1102b52bc21325dd61db95281734631 datapathConfiguration="&{false false false false false }" interface=lxc6407ca2bbc97 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af6c9a9845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af6c9a9845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af6c9a9845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=10386 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af6c9a9845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=10386 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af6c9a9845 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1466 identity=10386 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af6c9a9845 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1466 identity=10386 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=093973bc-ecbc-4245-9cbe-b79bcf9f0b04] Description:}]" policyAddRequest=3f40dafb-89b8-4717-9ac7-8182e01c8f6b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3f40dafb-89b8-4717-9ac7-8182e01c8f6b policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.66 b73f0192-3616-479a-bc05-db3433d6f15c default }" containerID=9159b12e10fcf537044fce33b058c55232ccadb7094f1127b98e6fb8c303c283 datapathConfiguration="&{false false false false false }" interface=lxcaaf1e09e0a4d k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9159b12e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9159b12e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9159b12e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=1392 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9159b12e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=1392 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9159b12e10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3015 identity=1392 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9159b12e10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=1392 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008985215144669741 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.177 c8c08702-8320-4818-83f2-43b9be655cc9 default }" containerID=4da20ed2c418a61e9f221f2ba95531c899111ea5e72dd1b41024d0ef22525d7b datapathConfiguration="&{false false false false false }" interface=lxc323d5e2680c0 k8sPodName=monitoring/node-feature-discovery-worker-vz5ww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4da20ed2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vz5ww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4da20ed2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vz5ww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4da20ed2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identity=1547 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vz5ww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4da20ed2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2994 identity=1547 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vz5ww subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4da20ed2c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2994 identity=1547 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vz5ww subsys=endpoint level=info msg="Successful endpoint creation" containerID=4da20ed2c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2994 identity=1547 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vz5ww subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 195996a7-b094-402f-90bc-b71509d72277 default }" containerID=641b583cea82d64dfbb59d67875d70703d887ba68a9dd577d149d6bb72bf1f47 datapathConfiguration="&{false false false false false }" interface=lxcbd3914402b36 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8vc6d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=641b583cea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8vc6d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 e13de3f4-b690-4715-a290-3155072dddba default }" containerID=c46f3ec52413c61b6ff8ba6ddb56e015c8fc25b7f662a788dcc819c6b98ce758 datapathConfiguration="&{false false false false false }" interface=lxc2d4f72855232 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6ms2j labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=641b583cea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8vc6d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=c46f3ec524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6ms2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c46f3ec524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6ms2j subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=641b583cea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=13064 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8vc6d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=641b583cea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2334 identity=13064 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8vc6d subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c46f3ec524 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=26718 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6ms2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c46f3ec524 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=277 identity=26718 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6ms2j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=641b583cea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2334 identity=13064 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8vc6d subsys=endpoint level=info msg="Successful endpoint creation" containerID=641b583cea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2334 identity=13064 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8vc6d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c46f3ec524 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=277 identity=26718 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6ms2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=c46f3ec524 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=26718 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-6ms2j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 866c2b84-f542-47d0-9df0-23f331bd7bd8 default }" containerID=9d5d3a1470c0203ba2b4d4aaf56f63eac544b7fef5d794989a1bd84157d882ef datapathConfiguration="&{false false false false false }" interface=lxce033f02d7434 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tj6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d5d3a1470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tj6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d5d3a1470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tj6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d5d3a1470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=5191 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tj6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d5d3a1470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=5191 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tj6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d5d3a1470 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=355 identity=5191 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tj6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d5d3a1470 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=355 identity=5191 ipv4=10.0.0.53 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-7tj6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2934 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02934 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02934 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02934 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02934:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2934 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 ea15c9e1-c4ab-4f0d-b79e-f5b3d1b87d9a default }" containerID=f37ffe884c03b1fe40a6b8d016cf7dac7f3259373082ba941883bb97538af6a0 datapathConfiguration="&{false false false false false }" interface=lxcac8a697dc665 k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f37ffe884c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f37ffe884c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f37ffe884c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=15432 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f37ffe884c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=75 identity=15432 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f37ffe884c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=75 identity=15432 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f37ffe884c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=15432 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f37ffe884c endpointID=75 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6x8xc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8b063e4f-e781-41c5-8390-77a5ac90acf0 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f37ffe884c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=75 identity=15432 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6x8xc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 34d7aa1d-ae98-43d3-9a3d-61310fbbfe48 default }" containerID=3cbcbd8c8e9b8f2498f207910f6ac2316e67a28dd76722fa047b751d6ff7c422 datapathConfiguration="&{false false false false false }" interface=lxc761249839340 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rsdwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cbcbd8c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rsdwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cbcbd8c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rsdwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3cbcbd8c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identity=61228 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rsdwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cbcbd8c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identity=61228 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rsdwb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 57e7902b-72d3-431e-8c4a-fbb9dcd59a1a default }" containerID=41a4c14fd0222bd479d20c7d2eff8ad18b6c45a7db457368ddc0c2e921aee0df datapathConfiguration="&{false false false false false }" interface=lxc37227a9959bb k8sPodName=monitoring/kube-prometheus-stack-grafana-5bbd6498d4-wqxqf labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.253 09e7ed32-1f3f-474f-8abf-763637f869c7 default }" containerID=dbfcb10d4918a0e27d7b7da06ae17430ed25ec462eb0606e7ee7d47b2aa4cf9f datapathConfiguration="&{false false false false false }" interface=lxc31a5e28805fa k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8fjvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41a4c14fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bbd6498d4-wqxqf subsys=endpoint level=info msg="New endpoint" containerID=dbfcb10d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8fjvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41a4c14fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bbd6498d4-wqxqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=dbfcb10d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8fjvk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41a4c14fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 identity=6040 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bbd6498d4-wqxqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41a4c14fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3210 identity=6040 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bbd6498d4-wqxqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbfcb10d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 identity=8644 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8fjvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbfcb10d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 identity=8644 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8fjvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cbcbd8c8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3247 identity=61228 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rsdwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cbcbd8c8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3247 identity=61228 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rsdwb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=41a4c14fd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3210 identity=6040 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bbd6498d4-wqxqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=41a4c14fd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3210 identity=6040 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5bbd6498d4-wqxqf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dbfcb10d49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2887 identity=8644 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8fjvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbfcb10d49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2887 identity=8644 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-8fjvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 fa41eb68-94be-4e2d-976b-49832cf7e723 default }" containerID=98b1da2c5e5e8393c29e3817cce0b3bfa45e79af48c02fa1005f40d607293ec3 datapathConfiguration="&{false false false false false }" interface=lxc04db4abb2f6b k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98b1da2c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98b1da2c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8320f6c7-610b-464d-8553-701dd619d60d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8320f6c7-610b-464d-8553-701dd619d60d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8320f6c7-610b-464d-8553-701dd619d60d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8320f6c7-610b-464d-8553-701dd619d60d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98b1da2c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identity=58280 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8320f6c7-610b-464d-8553-701dd619d60d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8320f6c7-610b-464d-8553-701dd619d60d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98b1da2c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2522 identity=58280 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98b1da2c5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2522 identity=58280 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=98b1da2c5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2522 identity=58280 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 e5fa644a-ed84-47dc-9c69-e8cdf8425855 default }" containerID=763f61faaaf0cc4cd693f6672a9cb340a60f5e41d3b3c2710081249128a3a968 datapathConfiguration="&{false false false false false }" interface=lxc14ebde96253a k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=763f61faaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=763f61faaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=763f61faaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=763f61faaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=1013 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=763f61faaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1895 identity=1013 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf subsys=endpoint level=info msg="Successful endpoint creation" containerID=763f61faaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1895 identity=1013 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 9df3765a-731e-4640-9816-770d276772d4 default }" containerID=58b7335cb034d49e628ec9f8a3b4f8cf9afcebad38f487caf7e4969af08af5a1 datapathConfiguration="&{false false false false false }" interface=lxcf6c2d172811d k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58b7335cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58b7335cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=58b7335cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58b7335cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identity=1013 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58b7335cb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3883 identity=1013 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58b7335cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3883 identity=1013 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 subsys=daemon level=info msg="Delete endpoint request" containerID=98b1da2c5e endpointID=2522 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-j6bdm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8320f6c7-610b-464d-8553-701dd619d60d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8320f6c7-610b-464d-8553-701dd619d60d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=98b1da2c5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2522 identity=58280 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-j6bdm subsys=endpoint level=info msg="Delete endpoint request" containerID=763f61faaa endpointID=1895 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=58b7335cb0 endpointID=3883 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=763f61faaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1895 identity=1013 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-36cc7bfe-441b-414a-aad2-07d2f3750acf subsys=endpoint level=info msg="Removed endpoint" containerID=58b7335cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3883 identity=1013 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6d5a75-fe44-4238-af52-e01760f16553 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 e4e59688-5676-4d73-abe8-943f0af06744 default }" containerID=9176af59673ab9ebc6df3d2ac94213c27e1f7ee42d29cb4856a73b4a84ff75f6 datapathConfiguration="&{false false false false false }" interface=lxcc3cd75e51187 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9176af5967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9176af5967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9176af5967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 identity=64152 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9176af5967 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 identity=64152 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9176af5967 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1521 identity=64152 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9176af5967 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1521 identity=64152 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.175 d12e3f72-9457-40dd-a568-8ab21f07b9ec default }" containerID=5d13b5790979809d0714a17f82ba2e3b5c0f7083495354246cb63d5c4f93b7d7 datapathConfiguration="&{false false false false false }" interface=lxce2c39a97a214 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d13b57909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d13b57909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d13b57909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 identity=15176 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d13b57909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3422 identity=15176 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d13b57909 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3422 identity=15176 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d13b57909 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3422 identity=15176 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 802884d7-1285-4405-8024-80dc6cfc43f9 default }" containerID=165e1267dc6f0d6beb4bce8cf83f30954e5b07953301767d6602fa58663f16ea datapathConfiguration="&{false false false false false }" interface=lxc2230bad74810 k8sPodName=monitoring/loki-gateway-cf54cb88c-gbg84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=165e1267dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2331 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gbg84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=165e1267dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2331 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gbg84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=165e1267dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2331 identity=25414 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gbg84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=165e1267dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2331 identity=25414 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gbg84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 f31c0ffb-2231-4987-8284-e3f5509630b8 default }" containerID=7cc519e7d4e79712c3cb9d8ebc738ee11e1f90a57cea46860354b886c01062ab datapathConfiguration="&{false false false false false }" interface=lxc859173bec715 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cc519e7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cc519e7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cc519e7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identity=48419 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cc519e7d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identity=48419 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 f7d943e6-c402-4762-be90-1dfc3d664191 default }" containerID=65942042f0395fdb3f3464b4fbcc1a0022ae5a07014959364a8bf6c4f3b29bec datapathConfiguration="&{false false false false false }" interface=lxce28961777dd4 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65942042f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65942042f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65942042f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identity=3239 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65942042f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identity=3239 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=165e1267dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2331 identity=25414 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gbg84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=165e1267dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2331 identity=25414 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-gbg84 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7cc519e7d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3343 identity=48419 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cc519e7d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3343 identity=48419 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65942042f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1642 identity=3239 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65942042f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1642 identity=3239 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 7e3ef03f-4f4b-4c6a-a3c3-ecb8716ff7c4 default }" containerID=d89fea5c9d68cb4529b4a6b0cf91ae90f5c92bbd0a1372af562d29d11646227f datapathConfiguration="&{false false false false false }" interface=lxc16f556b03751 k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d89fea5c9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d89fea5c9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d89fea5c9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d89fea5c9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=1013 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d89fea5c9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2155 identity=1013 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d89fea5c9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2155 identity=1013 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 7ec86247-70ee-4806-93a5-822946852fe8 default }" containerID=34b29d96b46b54c08c32b19b584064c7429d0aa702e356ae1709c0a9bb090c41 datapathConfiguration="&{false false false false false }" interface=lxce3ee841aaf22 k8sPodName=monitoring/vector-pd59f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34b29d96b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pd59f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34b29d96b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pd59f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=34b29d96b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pd59f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34b29d96b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=14169 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pd59f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34b29d96b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=14169 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pd59f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34b29d96b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=63 identity=14169 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pd59f subsys=endpoint level=info msg="Successful endpoint creation" containerID=34b29d96b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=63 identity=14169 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/vector-pd59f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d89fea5c9d endpointID=2155 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d89fea5c9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2155 identity=1013 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b4f3d202-3eee-47b3-a62e-b2c8f77b158f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 c9c8c12e-67c8-411f-8866-f0213accbeb5 default }" containerID=2bbfbb07c90fc3362853a69dd1cb8225aedeca8ac709459b007a4eff67fd2439 datapathConfiguration="&{false false false false false }" interface=lxcf4e63101cd7e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lvzmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bbfbb07c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lvzmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bbfbb07c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lvzmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bbfbb07c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=33680 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lvzmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bbfbb07c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=33680 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lvzmb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2bbfbb07c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2722 identity=33680 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lvzmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bbfbb07c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2722 identity=33680 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-lvzmb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.83 9e332aa2-f42f-4a05-8f98-07a4b3bb1daf default }" containerID=c374db3b14a4c71f78e1b1b1f216fca6bd444af2a2928160c54a051b499137eb datapathConfiguration="&{false false false false false }" interface=lxc6c8dbf6e3b02 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c374db3b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c374db3b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c374db3b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=1385 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c374db3b14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=1385 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c374db3b14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1284 identity=1385 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c374db3b14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=1385 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 9e87b4b6-f60d-406b-86d2-7d0e8643dd14 default }" containerID=f898eebe65d06c293fb918e08188dc3af587261277f4737fb6c7f0a2d1f5446a datapathConfiguration="&{false false false false false }" interface=lxc5f96003ffef8 k8sPodName=openstack/memcached-memcached-6479589586-sdtkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f898eebe65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sdtkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f898eebe65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sdtkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f898eebe65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=30425 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sdtkv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f898eebe65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=30425 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sdtkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f898eebe65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1459 identity=30425 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sdtkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f898eebe65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1459 identity=30425 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-sdtkv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 812449ab-8bcf-40a1-b3a5-77075c9e49ac default }" containerID=2a6f696a125337e3f5948893b95a366926dd26f8769b99dd4bd0e3267051970a datapathConfiguration="&{false false false false false }" interface=lxc2583a1bb38d6 k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a6f696a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a6f696a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a6f696a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a6f696a12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=1013 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a6f696a12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=444 identity=1013 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a6f696a12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=1013 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 subsys=daemon level=info msg="Delete endpoint request" containerID=2a6f696a12 endpointID=444 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2a6f696a12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=1013 ipv4=10.0.0.13 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27d28aec-5915-4b87-b21a-446d6e431e60 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 fa6ed454-f08b-4535-b545-5299b1092dcc default }" containerID=e10dd29862c9a5893006d2802e9a1c61421b8f7572dc294d13d93aea6dda98f4 datapathConfiguration="&{false false false false false }" interface=lxcf2f89e9f14ed k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e10dd29862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e10dd29862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e10dd29862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identity=19973 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e10dd29862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3767 identity=19973 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e10dd29862 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3767 identity=19973 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e10dd29862 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3767 identity=19973 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 2ca025ba-b032-45f4-8de2-237bf45a0ecf default }" containerID=47a7b4257230b95b4b4288784583e5bfe3c2c88e97d56424307aef74dee1b1b4 datapathConfiguration="&{false false false false false }" interface=lxcc76ed322d8fc k8sPodName=openstack/keystone-api-6459895858-q8cvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47a7b42572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-api-6459895858-q8cvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47a7b42572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-api-6459895858-q8cvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=47a7b42572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-api-6459895858-q8cvs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47a7b42572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=39174 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-api-6459895858-q8cvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47a7b42572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=39174 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-api-6459895858-q8cvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 cebf26bd-835a-4b86-95b2-291f52b2a73c default }" containerID=aa6cb91099e4502667b7e6fe63d9326ad1beab30ca1419b454f371081783cf61 datapathConfiguration="&{false false false false false }" interface=lxc60b1700e6c27 k8sPodName=openstack/keystone-credential-setup-844l4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa6cb91099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-844l4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa6cb91099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-844l4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa6cb91099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=6221 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-844l4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa6cb91099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2239 identity=6221 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-844l4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47a7b42572 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=228 identity=39174 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-api-6459895858-q8cvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=47a7b42572 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=39174 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-api-6459895858-q8cvs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aa6cb91099 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2239 identity=6221 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-844l4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa6cb91099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2239 identity=6221 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-844l4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa6cb91099 endpointID=2239 k8sNamespace=openstack k8sPodName=keystone-credential-setup-844l4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=88b21bb2-836e-4783-90ca-fc8bb5b82a85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aa6cb91099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2239 identity=6221 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-credential-setup-844l4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 c4d01e20-50f8-4196-a31e-626965ee341e default }" containerID=7fa69cf9901bb9dfdc13c3ef4dfbc8ca2289ebadcf5787e0253788606491d04b datapathConfiguration="&{false false false false false }" interface=lxc9c2fdaf82448 k8sPodName=openstack/keystone-db-init-m5j9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fa69cf990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-init-m5j9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fa69cf990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-init-m5j9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fa69cf990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=3626 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-init-m5j9k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7fa69cf990 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=3626 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-init-m5j9k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fa69cf990 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=207 identity=3626 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-init-m5j9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fa69cf990 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=3626 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-init-m5j9k subsys=daemon level=info msg="Delete endpoint request" containerID=7fa69cf990 endpointID=207 k8sNamespace=openstack k8sPodName=keystone-db-init-m5j9k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=14f5e983-133c-415a-b3e4-e10507a2bb89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7fa69cf990 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=3626 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-init-m5j9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 e96f1c8a-5d44-434c-8892-5695279ce1ed default }" containerID=9f12dbab1ada18d3ef8d25c40b7377c363da2ffc958cb0c4be9c468dc020dc24 datapathConfiguration="&{false false false false false }" interface=lxc9aa8411d2cfc k8sPodName=openstack/keystone-fernet-setup-jgpn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f12dbab1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-jgpn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f12dbab1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-jgpn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f12dbab1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=5710 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-jgpn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f12dbab1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=5710 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-jgpn6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f12dbab1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=837 identity=5710 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-jgpn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f12dbab1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=5710 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-jgpn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f12dbab1a endpointID=837 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-jgpn6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5da24f61-1714-40ab-bc8e-3b470b329447 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f12dbab1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=837 identity=5710 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-fernet-setup-jgpn6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 55a95030-5c52-4820-bb7e-c93520872e8a default }" containerID=821e8a8c138b73dd0ee930f3c5237eae1c98b735e22cdb32709fa5664b35f65c datapathConfiguration="&{false false false false false }" interface=lxcdc40b2b77182 k8sPodName=openstack/keystone-db-sync-lhdjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=821e8a8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-sync-lhdjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=821e8a8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-sync-lhdjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=821e8a8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=58623 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-sync-lhdjn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=821e8a8c13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=58623 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-sync-lhdjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=821e8a8c13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1544 identity=58623 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-sync-lhdjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=821e8a8c13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1544 identity=58623 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-sync-lhdjn subsys=daemon level=info msg="Delete endpoint request" containerID=821e8a8c13 endpointID=1544 k8sNamespace=openstack k8sPodName=keystone-db-sync-lhdjn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=cd6d1d16-a868-453e-a03a-fc5732b83bcc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=821e8a8c13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1544 identity=58623 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-sync-lhdjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 0133e496-cd1f-4744-ad60-60de6ca4c3e4 default }" containerID=4fbd6f7e85f72c48b2b14b528cf0d6114d7c3ad55f58402952147f64b269f78e datapathConfiguration="&{false false false false false }" interface=lxc9867f90a0578 k8sPodName=openstack/keystone-rabbit-init-h98j2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fbd6f7e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-rabbit-init-h98j2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fbd6f7e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-rabbit-init-h98j2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fbd6f7e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=62751 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-rabbit-init-h98j2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fbd6f7e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=62751 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-rabbit-init-h98j2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4fbd6f7e85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2095 identity=62751 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-rabbit-init-h98j2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fbd6f7e85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2095 identity=62751 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-rabbit-init-h98j2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fbd6f7e85 endpointID=2095 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-h98j2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ef8c2d29-5385-4f02-b87d-c6065a562c57 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4fbd6f7e85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2095 identity=62751 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/keystone-rabbit-init-h98j2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 14922beb-e094-489b-92fd-f514a586b16c default }" containerID=cae09768147325a644d67aeab612acb5c597d556775cc6dd837b647833228ffb datapathConfiguration="&{false false false false false }" interface=lxc4241cff7e605 k8sPodName=openstack/keystone-domain-manage-k5gr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cae0976814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-domain-manage-k5gr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cae0976814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-domain-manage-k5gr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cae0976814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=29418 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-domain-manage-k5gr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cae0976814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=29418 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-domain-manage-k5gr7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cae0976814 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=105 identity=29418 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-domain-manage-k5gr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cae0976814 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=29418 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-domain-manage-k5gr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cae0976814 endpointID=105 k8sNamespace=openstack k8sPodName=keystone-domain-manage-k5gr7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=c0966f10-f9fe-4b66-871e-81d101eb8740 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cae0976814 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=29418 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-domain-manage-k5gr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 8b2155d4-cc92-42d7-81f2-07894e0abdbb default }" containerID=ab76edc7861ed6487b9709063dd210af060956280da98c53bc87969c2ee146aa datapathConfiguration="&{false false false false false }" interface=lxc8458bca1b1eb k8sPodName=openstack/keystone-bootstrap-zq8w4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab76edc786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-bootstrap-zq8w4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab76edc786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-bootstrap-zq8w4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab76edc786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identity=33592 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-bootstrap-zq8w4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab76edc786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1409 identity=33592 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-bootstrap-zq8w4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab76edc786 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1409 identity=33592 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-bootstrap-zq8w4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab76edc786 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1409 identity=33592 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-bootstrap-zq8w4 subsys=daemon level=info msg="Delete endpoint request" containerID=ab76edc786 endpointID=1409 k8sNamespace=openstack k8sPodName=keystone-bootstrap-zq8w4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=47f1b1ed-5586-425e-9fad-4b33c2f9baeb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ab76edc786 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1409 identity=33592 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-bootstrap-zq8w4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 68ad3d69-12e3-4d8c-987b-5d166e6335ce default }" containerID=07d0eb1d6995846df2e947dd401969369ec950abbda77d47c4a3db5f764aeef8 datapathConfiguration="&{false false false false false }" interface=lxcaad3b25dd7d2 k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07d0eb1d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07d0eb1d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07d0eb1d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07d0eb1d69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1946 identity=1013 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07d0eb1d69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1946 identity=1013 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07d0eb1d69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1946 identity=1013 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 subsys=daemon level=info msg="Delete endpoint request" containerID=07d0eb1d69 endpointID=1946 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=07d0eb1d69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1946 identity=1013 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f124ded9-287c-4f76-af9b-e29366460d47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 48341889-55ef-4f70-8f58-4ef53de34fca default }" containerID=2d44f0e6a821d493011d34e52ccc10ea832eb8fb0287e9ec159360d9e5104c11 datapathConfiguration="&{false false false false false }" interface=lxcbd066ca98453 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d44f0e6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d44f0e6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d44f0e6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=49561 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2d44f0e6a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=49561 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d44f0e6a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=553 identity=49561 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d44f0e6a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=49561 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03492634626050022 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.10 bf635466-bac5-4b5f-9105-35ef67a7733b default }" containerID=4e307c78b57bd13da763e880cdcdbb156cee97d2e939c338de467ec433b5907e datapathConfiguration="&{false false false false false }" interface=lxc63b50c21cba7 k8sPodName=openstack/barbican-api-759fcf57bb-4dlrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e307c78b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-759fcf57bb-4dlrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e307c78b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-759fcf57bb-4dlrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e307c78b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identity=24260 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-759fcf57bb-4dlrv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4e307c78b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1558 identity=24260 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-759fcf57bb-4dlrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 ecff9fda-5abf-47a6-a687-d41f150d589e default }" containerID=86967a06b06a4ef5e6c83f00f8923bb75c151cfabb0ef5927c0ffeb158a75992 datapathConfiguration="&{false false false false false }" interface=lxc67c8f073ee65 k8sPodName=openstack/barbican-db-init-g42wr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86967a06b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-init-g42wr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86967a06b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-init-g42wr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86967a06b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=27397 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-init-g42wr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86967a06b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=27397 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-init-g42wr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e307c78b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1558 identity=24260 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-759fcf57bb-4dlrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e307c78b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1558 identity=24260 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-759fcf57bb-4dlrv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=86967a06b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1761 identity=27397 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-init-g42wr subsys=endpoint level=info msg="Successful endpoint creation" containerID=86967a06b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=27397 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-init-g42wr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86967a06b0 endpointID=1761 k8sNamespace=openstack k8sPodName=barbican-db-init-g42wr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=d5b63f21-f350-4f17-bbca-e09c8ed0a7df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=86967a06b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=27397 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-db-init-g42wr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 37f98cfb-6a85-413c-863d-cc94e089ea7d default }" containerID=5b06ad98399b874799d4528c589aeddcc76581b63b6f2fd515cd9b1a4cfe2ba0 datapathConfiguration="&{false false false false false }" interface=lxcc200c683058f k8sPodName=openstack/barbican-db-sync-mdjdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b06ad9839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b06ad9839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5422a4d8-bb83-42df-a592-13c528a85363,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5422a4d8-bb83-42df-a592-13c528a85363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5422a4d8-bb83-42df-a592-13c528a85363;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=5422a4d8-bb83-42df-a592-13c528a85363;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5b06ad9839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5b06ad9839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=29541 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5422a4d8-bb83-42df-a592-13c528a85363,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5422a4d8-bb83-42df-a592-13c528a85363,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b06ad9839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=29541 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b06ad9839 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=937 identity=29541 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b06ad9839 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=29541 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b06ad9839 endpointID=937 k8sNamespace=openstack k8sPodName=barbican-db-sync-mdjdm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5422a4d8-bb83-42df-a592-13c528a85363 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=5422a4d8-bb83-42df-a592-13c528a85363 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5b06ad9839 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=29541 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-sync-mdjdm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 751aa2da-426a-46d3-b4d2-780172dc11a5 default }" containerID=bb26e747648d507e625e65a1a05558b5c97fa1eb018ee3c2765501b3af187e90 datapathConfiguration="&{false false false false false }" interface=lxcaa8e97bf2a7b k8sPodName=openstack/barbican-rabbit-init-rsdh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb26e74764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3539 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb26e74764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3539 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bb26e74764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3539 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bb26e74764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3539 identity=38854 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb26e74764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3539 identity=38854 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb26e74764 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3539 identity=38854 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb26e74764 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3539 identity=38854 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb26e74764 endpointID=3539 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-rsdh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5c70002a-7f90-489e-b1e0-65dcd560a6e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bb26e74764 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3539 identity=38854 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-rabbit-init-rsdh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 66799bcc-f8b1-4513-be13-0f372a7f8523 default }" containerID=074c5265c9c9e7d24a909bd4df021c143453c660efbbd2fb2ec27a82c842216e datapathConfiguration="&{false false false false false }" interface=lxc19eed73108bd k8sPodName=openstack/barbican-ks-service-5b2zq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=074c5265c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-5b2zq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=074c5265c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-5b2zq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=074c5265c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 identity=38829 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-5b2zq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=074c5265c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1838 identity=38829 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-5b2zq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=074c5265c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1838 identity=38829 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-5b2zq subsys=endpoint level=info msg="Successful endpoint creation" containerID=074c5265c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1838 identity=38829 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-5b2zq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=074c5265c9 endpointID=1838 k8sNamespace=openstack k8sPodName=barbican-ks-service-5b2zq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=499bf113-850c-4b7d-8ab2-d42e70ec4e53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=074c5265c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1838 identity=38829 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-5b2zq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 9060ac02-fdf7-42a9-86e5-77f411fc39a6 default }" containerID=281012c2ca530c56158a8ddbf0a1ddfa0f072d9c71f75d3b84652f3d911842b9 datapathConfiguration="&{false false false false false }" interface=lxc9a4071f1b0f0 k8sPodName=openstack/barbican-ks-endpoints-7m7lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=281012c2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7m7lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=281012c2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7m7lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=281012c2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=18527 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7m7lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=281012c2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=18527 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7m7lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=281012c2ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=14 identity=18527 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7m7lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=281012c2ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=14 identity=18527 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7m7lx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=281012c2ca endpointID=14 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-7m7lx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=831e2ec9-d878-40c5-8587-8e0321c7c507 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=281012c2ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=14 identity=18527 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7m7lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 f14b139d-a7e5-4bc9-bd62-d67676dd761e default }" containerID=1bed415502be7d3bc8346584e40ce07ecfddcbe40874a66a377be43b5d33811b datapathConfiguration="&{false false false false false }" interface=lxca326a43474b3 k8sPodName=openstack/barbican-ks-user-gnzct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bed415502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-user-gnzct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bed415502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-user-gnzct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1bed415502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=5172 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-user-gnzct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bed415502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=5172 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-user-gnzct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bed415502 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=313 identity=5172 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-user-gnzct subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bed415502 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=5172 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-user-gnzct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bed415502 endpointID=313 k8sNamespace=openstack k8sPodName=barbican-ks-user-gnzct subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=9628bf92-4657-46e4-b0b4-232fc20d8825 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1bed415502 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=5172 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-ks-user-gnzct subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.166 4ee4ecf0-8b05-4968-8077-80e4e0e04e63 default }" containerID=8aa51762008b3ddc54fe8b5409d7c351a191ed686d312d9570e95e7bb8e2afb1 datapathConfiguration="&{false false false false false }" interface=lxc1328da52dd2a k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j8bqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aa5176200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j8bqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aa5176200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j8bqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8aa5176200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=16106 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j8bqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aa5176200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=16106 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j8bqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aa5176200 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2824 identity=16106 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j8bqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aa5176200 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2824 identity=16106 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-j8bqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 b7c69f03-46f9-484b-aa18-e306ad734534 default }" containerID=aef2112a218b39c8facdeef63ebbfa6eaa6ab9c3bcafe44dc70488caa4563b31 datapathConfiguration="&{false false false false false }" interface=lxc1412a8008393 k8sPodName=openstack/rook-ceph-detect-version-dpqh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aef2112a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dpqh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aef2112a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dpqh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aef2112a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=28976 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dpqh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aef2112a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=704 identity=28976 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dpqh8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aef2112a21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=704 identity=28976 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dpqh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aef2112a21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=28976 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dpqh8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aef2112a21 endpointID=704 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-dpqh8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=701cdf2d-3085-48a7-9157-d34d37fa9c7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=aef2112a21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=704 identity=28976 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dpqh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 aae052c6-f072-459a-acfb-d043ec7fcf9d default }" containerID=e3be20accf0540a3a81e5ced01729b50db2548c17e88c694c05d05a3bf2ba190 datapathConfiguration="&{false false false false false }" interface=lxcbb8844bef0a8 k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3be20accf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3be20accf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e3be20accf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3be20accf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=297 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3be20accf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=297 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3be20accf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3096 identity=297 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3be20accf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3096 identity=297 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e3be20accf endpointID=3096 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-gsr9k subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=169e4c13-b029-4c8d-b5aa-c0cdb3768a63 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e3be20accf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3096 identity=297 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gsr9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 3fcb4abd-f4be-4ea1-80d3-eec3966f174a default }" containerID=da943ee9623e52b0660db27ce6935c68110d75a7af98beeeed4d3c75d580c95b datapathConfiguration="&{false false false false false }" interface=lxc14d90be4fbfe k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da943ee962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da943ee962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da943ee962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=1013 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da943ee962 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=1013 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da943ee962 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=1013 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da943ee962 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=1013 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 subsys=daemon level=info msg="Delete endpoint request" containerID=da943ee962 endpointID=1159 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=da943ee962 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=1013 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef80c3e8-792a-44a7-b250-b973d3ba51f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 3d537cb6-067a-4556-93bf-2ae978f7a2d6 default }" containerID=2e61bcb23c23051fdbe44d42fa779e05bbedd927f33db8164bb5b220404fd32a datapathConfiguration="&{false false false false false }" interface=lxca303315ca9f6 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e61bcb23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e61bcb23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e61bcb23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identity=31266 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2e61bcb23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identity=31266 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e61bcb23c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1305 identity=31266 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e61bcb23c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1305 identity=31266 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.178 013713fd-3754-4120-a3c9-dff0a59b0f67 default }" containerID=73b3ab961143e2b52ced06e40cb380ddde27d1679d5f5aaae86f684bf20af68f datapathConfiguration="&{false false false false false }" interface=lxcb30bdd79a071 k8sPodName=openstack/glance-db-init-qps9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73b3ab9611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73b3ab9611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=73b3ab9611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73b3ab9611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=32515 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73b3ab9611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2357 identity=32515 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73b3ab9611 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2357 identity=32515 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=73b3ab9611 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2357 identity=32515 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 a7412015-dc69-491a-a6bd-56498cd01f8c default }" containerID=f29ed3a91348cf78c290a5e0b995512997aa149262341a55f537bb359f464f37 datapathConfiguration="&{false false false false false }" interface=lxc6e4126401457 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f29ed3a913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f29ed3a913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f29ed3a913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f29ed3a913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identity=46427 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f29ed3a913 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identity=46427 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 b119a94e-bd73-4d5a-831d-f8796b438215 default }" containerID=ba3a9aa3b0f128ae65d19535b31177a655d70ccdd5fb1fee0ac00f84a9cf3da1 datapathConfiguration="&{false false false false false }" interface=lxcd112220cbf9c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qbbq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba3a9aa3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qbbq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba3a9aa3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qbbq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba3a9aa3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=22533 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qbbq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba3a9aa3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=22533 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qbbq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f29ed3a913 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2622 identity=46427 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w subsys=endpoint level=info msg="Successful endpoint creation" containerID=f29ed3a913 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2622 identity=46427 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-mr97w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ba3a9aa3b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1583 identity=22533 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qbbq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba3a9aa3b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1583 identity=22533 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-qbbq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73b3ab9611 endpointID=2357 k8sNamespace=openstack k8sPodName=glance-db-init-qps9j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=60c27c62-54f4-440d-80bb-ff1dbedeebb4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=73b3ab9611 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2357 identity=32515 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/glance-db-init-qps9j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 be3696be-b061-4859-a374-9f38d8fe8cd4 default }" containerID=7517879ff9c7ceb28184ac0dd4a4609fcffbe9a2bc1d9b9a94029dcb1aaba409 datapathConfiguration="&{false false false false false }" interface=lxc21b624c97208 k8sPodName=openstack/glance-db-sync-nbdn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7517879ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-nbdn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7517879ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-nbdn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7517879ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=15033 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-nbdn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7517879ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-nbdn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7517879ff9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3668 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-nbdn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7517879ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3668 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-nbdn5 subsys=daemon level=info msg="Delete endpoint request" containerID=7517879ff9 endpointID=3668 k8sNamespace=openstack k8sPodName=glance-db-sync-nbdn5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=c2ee8c9a-3ead-4132-980c-eee23b0c11c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7517879ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3668 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-nbdn5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 e1d6e635-ee15-4693-8799-c535d42d9121 default }" containerID=5b2439d79c5f3391aedb7c7e2ad96ccfc1dc6e465c030f4ab1b3598c5b3a0110 datapathConfiguration="&{false false false false false }" interface=lxc5f2bc5b4aa05 k8sPodName=openstack/glance-rabbit-init-ksjc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b2439d79c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-rabbit-init-ksjc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b2439d79c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-rabbit-init-ksjc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b2439d79c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=5878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-rabbit-init-ksjc8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5b2439d79c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=178 identity=5878 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-rabbit-init-ksjc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b2439d79c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=178 identity=5878 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-rabbit-init-ksjc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b2439d79c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=178 identity=5878 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-rabbit-init-ksjc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b2439d79c endpointID=178 k8sNamespace=openstack k8sPodName=glance-rabbit-init-ksjc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3a07af8f-f2c9-407e-96fe-4d570497e900 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5b2439d79c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=178 identity=5878 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-rabbit-init-ksjc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 3ba4d225-f182-4820-b2cb-eccf36861870 default }" containerID=d1f1cc4cff4bc391e3d4279ccbf766b7317f3bfd497bdd3f4da8c9a1200ab6d8 datapathConfiguration="&{false false false false false }" interface=lxc9b14bbeada22 k8sPodName=openstack/glance-ks-service-gqz8d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1f1cc4cff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-service-gqz8d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1f1cc4cff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-service-gqz8d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1f1cc4cff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=27005 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-service-gqz8d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1f1cc4cff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=27005 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-service-gqz8d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d1f1cc4cff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=40 identity=27005 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-service-gqz8d subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1f1cc4cff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=40 identity=27005 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-service-gqz8d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d1f1cc4cff endpointID=40 k8sNamespace=openstack k8sPodName=glance-ks-service-gqz8d subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=a0303d9e-5d26-4a69-b0be-ad1501201080 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d1f1cc4cff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=40 identity=27005 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-service-gqz8d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 90f96cd4-bb82-4c25-895f-652572395ea3 default }" containerID=234a34e4c96ef6295e82783d63e348d3fcc56ff430bae9c09b9dc3d2f47e3b9b datapathConfiguration="&{false false false false false }" interface=lxc731f897ca774 k8sPodName=openstack/glance-ks-endpoints-7zpz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=234a34e4c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-7zpz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=234a34e4c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-7zpz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=234a34e4c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=54027 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-7zpz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=234a34e4c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1656 identity=54027 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-7zpz9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=234a34e4c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1656 identity=54027 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-7zpz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=234a34e4c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1656 identity=54027 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-7zpz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=234a34e4c9 endpointID=1656 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-7zpz9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=37ea4c93-7e67-4a59-8f95-af2edad2c926 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=234a34e4c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1656 identity=54027 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-7zpz9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 45adfbdc-ca22-471d-9b4b-36973068bdb8 default }" containerID=f62c038820e1734f470c6e42f883dd3ac823f4ff587e8ced900b42fcef7cbeaa datapathConfiguration="&{false false false false false }" interface=lxc60d47f6d5e74 k8sPodName=openstack/glance-ks-user-7lmjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f62c038820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-7lmjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f62c038820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-7lmjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f62c038820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 identity=4783 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-7lmjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f62c038820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 identity=4783 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-7lmjw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f62c038820 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=542 identity=4783 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-7lmjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f62c038820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=542 identity=4783 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-7lmjw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f62c038820 endpointID=542 k8sNamespace=openstack k8sPodName=glance-ks-user-7lmjw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e6ba3616-d999-4633-8c50-ea42f2870f62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f62c038820 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=542 identity=4783 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-user-7lmjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 2b6515b3-09f6-4bc5-b56a-e4b01191be5d default }" containerID=6c8ce0bc43b1ccc8355ff9e73605290ba40e8264f3505a72e32e94c2274d549e datapathConfiguration="&{false false false false false }" interface=lxc13b5baf95cd2 k8sPodName=openstack/glance-metadefs-load-qbqdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c8ce0bc43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-metadefs-load-qbqdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c8ce0bc43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-metadefs-load-qbqdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c8ce0bc43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=45825 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-metadefs-load-qbqdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c8ce0bc43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=45825 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-metadefs-load-qbqdq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6c8ce0bc43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=614 identity=45825 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-metadefs-load-qbqdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c8ce0bc43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=614 identity=45825 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-metadefs-load-qbqdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c8ce0bc43 endpointID=614 k8sNamespace=openstack k8sPodName=glance-metadefs-load-qbqdq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=ebe9292f-364f-43dc-92f0-9aebbbbdeef1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6c8ce0bc43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=614 identity=45825 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/glance-metadefs-load-qbqdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 db57ea9e-24a9-4ef2-bedd-8271987f232d default }" containerID=9c28a89cd671012a1b782293e46720d460cd36010771cbe925f87bedf71de05b datapathConfiguration="&{false false false false false }" interface=lxcba005a9e6f43 k8sPodName=openstack/glance-storage-init-n8kmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c28a89cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-storage-init-n8kmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c28a89cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-storage-init-n8kmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c28a89cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=7053 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-storage-init-n8kmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c28a89cd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2807 identity=7053 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-storage-init-n8kmj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c28a89cd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2807 identity=7053 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-storage-init-n8kmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c28a89cd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2807 identity=7053 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-storage-init-n8kmj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c28a89cd6 endpointID=2807 k8sNamespace=openstack k8sPodName=glance-storage-init-n8kmj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=446f1815-92e0-4f5f-8725-4701cac8e362 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9c28a89cd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2807 identity=7053 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-storage-init-n8kmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 0c83b87c-6661-4fec-876e-7f9a10f59ffe default }" containerID=ec81c93de183f03e56b78b3e11c6470addda8d16f2e1e128c1d756acefb61675 datapathConfiguration="&{false false false false false }" interface=lxc5f47693b3655 k8sPodName=openstack/glance-api-65bbf45f5f-hsx6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec81c93de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-65bbf45f5f-hsx6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec81c93de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-65bbf45f5f-hsx6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec81c93de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=49857 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-65bbf45f5f-hsx6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec81c93de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=392 identity=49857 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-65bbf45f5f-hsx6s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ec81c93de1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=392 identity=49857 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-65bbf45f5f-hsx6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec81c93de1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=392 identity=49857 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-api-65bbf45f5f-hsx6s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 acc904e0-a896-4447-8c21-5bea0fe0dbca default }" containerID=45a6f22c1d09fd2e9c7da07de07a53e1d1e8de7cc0ee59b2717aaf1bdf8bc36b datapathConfiguration="&{false false false false false }" interface=lxcbfbc270955e5 k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45a6f22c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45a6f22c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45a6f22c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45a6f22c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=1085 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45a6f22c1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=1085 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 eca269b7-5b77-4fa4-96d7-06a61b11cab7 default }" containerID=87b6844323c4cfb0cb28d8fd831a0c4f2bd056753c02adf6476a926d24665dd7 datapathConfiguration="&{false false false false false }" interface=lxc2f783ef40e2c k8sPodName=openstack/staffeln-api-5c56d6df9c-t2hjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87b6844323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-api-5c56d6df9c-t2hjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87b6844323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-api-5c56d6df9c-t2hjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87b6844323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=7699 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-api-5c56d6df9c-t2hjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87b6844323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=7699 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-api-5c56d6df9c-t2hjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 653f7e13-0f56-4470-bfac-fc1109f50f10 default }" containerID=e9612a54ae00ac469dec563de6b906fc65caa0d034ce9ff8c0355fe35288d21b datapathConfiguration="&{false false false false false }" interface=lxcfcac5e928f6a k8sPodName=openstack/staffeln-db-init-sf575 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9612a54ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-db-init-sf575 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9612a54ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-db-init-sf575 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9612a54ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=11189 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-db-init-sf575 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9612a54ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=11189 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-db-init-sf575 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45a6f22c1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=865 identity=1085 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45a6f22c1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=865 identity=1085 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/staffeln-conductor-ff85cb574-m65n7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=87b6844323 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2176 identity=7699 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-api-5c56d6df9c-t2hjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=87b6844323 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=7699 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/staffeln-api-5c56d6df9c-t2hjn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e9612a54ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1925 identity=11189 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-db-init-sf575 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9612a54ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1925 identity=11189 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-db-init-sf575 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9612a54ae endpointID=1925 k8sNamespace=openstack k8sPodName=staffeln-db-init-sf575 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=7335ee2f-e77f-4479-a367-4c0d93e67e51 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=e9612a54ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1925 identity=11189 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/staffeln-db-init-sf575 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 d028239a-893f-46e4-81eb-58b1ae78b253 default }" containerID=ec030f1f0aead87ab0b5dda592b3a3b14deddd93a4106614b64959dd7af4c04e datapathConfiguration="&{false false false false false }" interface=lxc29106bebdd0a k8sPodName=openstack/staffeln-db-sync-gpkzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec030f1f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-db-sync-gpkzs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec030f1f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8ebba250-0c1b-47fb-b824-a452e2bb4d5f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=8ebba250-0c1b-47fb-b824-a452e2bb4d5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-db-sync-gpkzs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8ebba250-0c1b-47fb-b824-a452e2bb4d5f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=8ebba250-0c1b-47fb-b824-a452e2bb4d5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec030f1f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identity=33894 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8ebba250-0c1b-47fb-b824-a452e2bb4d5f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=8ebba250-0c1b-47fb-b824-a452e2bb4d5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-db-sync-gpkzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec030f1f0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identity=33894 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-db-sync-gpkzs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ec030f1f0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2829 identity=33894 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-db-sync-gpkzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec030f1f0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2829 identity=33894 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-db-sync-gpkzs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager