level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="818.488µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="40.11µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.333529ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="33.761µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=107.285781ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.831µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.66µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="62.452µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="67.642µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="73.332µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="486.87µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.44µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=23.752105ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=4.860398ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="67.341µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="68.331µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="207.195µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="134.313µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="80.152µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.855415ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="117.993µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="9.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.75.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.574598ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.632188ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.18677ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="9.601µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="37.641µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.91µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="70.681µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="331.718µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="29.421µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="243.355µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.023893ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.193866ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.89µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.011µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.75 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.75 ipAddr.ipv6="" k8sNodeIP=199.19.213.75 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.75" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.185" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.75" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.75} {CiliumInternalIP 10.0.0.185}] 10.0.0.0/24 [] [] 10.0.0.23 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39313" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.675650617s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="19.381µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.64µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="89.392µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="16.76µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.852018941s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.819828ms file-path=/var/run/cilium/state/templates/5113a513cb57f77bd893b09ce84a24e7ab9635ba5569573a32c2866f972d0fad/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2327 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 ipv4=10.0.0.23 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identityLabels="reserved:health" ipv4=10.0.0.23 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=4 identityLabels="reserved:health" ipv4=10.0.0.23 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 023c2967-b84a-48b5-9171-149e4a4cc712 default }" containerID=93cf0746d3c49139b7fb9bea8a7b31bcdd119dd346303422aabd9da2dd3c404c datapathConfiguration="&{false false false false false }" interface=lxc5d48197bb063 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93cf0746d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 ipv4=10.0.0.70 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93cf0746d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.70 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=93cf0746d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=20412 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.70 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93cf0746d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=20412 ipv4=10.0.0.70 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 870439c2-fd84-4cc9-b108-f55ff9c85170 default }" containerID=be93827d0522794ae02a564f87cf6aaab9e15c8a51e9232907cd28c98b98f0d9 datapathConfiguration="&{false false false false false }" interface=lxc4cf01f5d8e59 k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be93827d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be93827d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be93827d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=6793 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be93827d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=6793 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.089040643s file-path=/var/run/cilium/state/templates/2aadbc5d4bcd81ede85703a9b28d7ee2d29c7deb13faefdc2c0e7ed7d401913a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=93cf0746d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1700 identity=20412 ipv4=10.0.0.70 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s subsys=endpoint level=info msg="Successful endpoint creation" containerID=93cf0746d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1700 identity=20412 ipv4=10.0.0.70 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1283 identity=4 ipv4=10.0.0.23 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be93827d05 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2086 identity=6793 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be93827d05 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2086 identity=6793 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93cf0746d3 endpointID=1700 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-4g94s subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ec26a389-a662-4988-ad0b-8857ba50a2ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=93cf0746d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1700 identity=20412 ipv4=10.0.0.70 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4g94s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 9f445a5f-6591-44b8-a00c-53daf784b25d default }" containerID=60037e700eeb5c13c8624120b8d51dc84673895623b6a0dcb1eb1dff02bdfc59 datapathConfiguration="&{false false false false false }" interface=lxc3db79108709c k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kgtl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60037e700e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kgtl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60037e700e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kgtl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60037e700e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=36770 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kgtl5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60037e700e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1977 identity=36770 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kgtl5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60037e700e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1977 identity=36770 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kgtl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60037e700e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1977 identity=36770 ipv4=10.0.0.170 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-kgtl5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2327 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02327 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02327 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02327 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02327:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2327 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 3271d0d6-95d1-4f55-b693-4bac1077c8ec default }" containerID=6eb6a6d895750ec12fdc9f13932828038bab826244cb2419a9d4155e3f8cfa63 datapathConfiguration="&{false false false false false }" interface=lxc5b32b4e08330 k8sPodName=kube-system/coredns-67659f764b-74s28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6eb6a6d895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-74s28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6eb6a6d895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-74s28 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6eb6a6d895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=6793 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-74s28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6eb6a6d895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=972 identity=6793 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-74s28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6eb6a6d895 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=972 identity=6793 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-74s28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6eb6a6d895 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=972 identity=6793 ipv4=10.0.0.200 ipv6= k8sPodName=kube-system/coredns-67659f764b-74s28 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 dbdc75f5-894c-47c7-8c1c-67fff4db0a8e default }" containerID=b96fd8f5232c346d82e3d8f62255227768e598b524c26699f9244888b62b47ae datapathConfiguration="&{false false false false false }" interface=lxc3f3328cc392b k8sPodName=kube-system/coredns-67659f764b-clnph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b96fd8f523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-clnph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b96fd8f523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-clnph subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b96fd8f523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=6793 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-clnph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b96fd8f523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=6793 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-clnph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b96fd8f523 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1128 identity=6793 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-clnph subsys=endpoint level=info msg="Successful endpoint creation" containerID=b96fd8f523 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1128 identity=6793 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-67659f764b-clnph subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 ec7334d5-43db-44f4-a59b-9200c9a8a1c5 default }" containerID=c5ef19a63b6cecbe55f6de8efa02411d4568d5bdd2931d8ceb5b06e32668b210 datapathConfiguration="&{false false false false false }" interface=lxc2fbaff2dc7a8 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5ef19a63b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5ef19a63b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c5ef19a63b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5ef19a63b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=21689 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5ef19a63b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=21689 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5ef19a63b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2216 identity=21689 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5ef19a63b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2216 identity=21689 ipv4=10.0.0.159 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-cbvjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be93827d05 endpointID=2086 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-wxwb9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=be93827d05 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2086 identity=6793 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wxwb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 3a95c117-0700-47ef-99e1-f37290046303 default }" containerID=357c4166bd4cc2702534ad5a1792444476a440da5d3484829b2fcf4911cf57a7 datapathConfiguration="&{false false false false false }" interface=lxcfe18f8c719dd k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gzzln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=357c4166bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gzzln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=357c4166bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gzzln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=357c4166bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 identity=12832 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gzzln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=357c4166bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 identity=12832 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gzzln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=357c4166bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1590 identity=12832 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gzzln subsys=endpoint level=info msg="Successful endpoint creation" containerID=357c4166bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1590 identity=12832 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-gzzln subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.207 d16bba39-7c4b-431e-b647-bc0e10e178d8 default }" containerID=caef87759843a926c98504e477cb60e458655d9af255ccdf8ed3a28c4c28e053 datapathConfiguration="&{false false false false false }" interface=lxcd05fbd26d730 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmfd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caef877598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmfd9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 668131b1-2852-4dbe-8e99-0f81dad64f29 default }" containerID=dacf7dd6b1efd3e3627cb696c9c50f99dd49fba7cc6507d8aaad10ac71fbd710 datapathConfiguration="&{false false false false false }" interface=lxc22c524545b51 k8sPodName=cert-manager/cert-manager-75c4c745bc-drpch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dacf7dd6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-drpch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caef877598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmfd9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=dacf7dd6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-drpch subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caef877598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identity=4542 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmfd9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caef877598 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identity=4542 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmfd9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dacf7dd6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=4219 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-drpch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dacf7dd6b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=4219 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-drpch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caef877598 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1121 identity=4542 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmfd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=caef877598 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1121 identity=4542 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rmfd9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dacf7dd6b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=14 identity=4219 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-drpch subsys=endpoint level=info msg="Successful endpoint creation" containerID=dacf7dd6b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=14 identity=4219 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-drpch subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 0664494d-e6d8-4d93-a88b-c0ae91860e1a default }" containerID=e778f055a5cd19d6afea9e8195a0c67f59078ec2e00a900cc5d84fed56640256 datapathConfiguration="&{false false false false false }" interface=lxc457cb70af00f k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e778f055a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e778f055a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e778f055a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=41602 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e778f055a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=41602 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e778f055a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2035 identity=41602 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e778f055a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2035 identity=41602 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e778f055a5 endpointID=2035 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-jjpv9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=d94ee754-51fd-4b9e-bcf2-3abb2bc7a645 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=e778f055a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2035 identity=41602 ipv4=10.0.0.47 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jjpv9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 bf55a962-33dc-42df-ba09-bbcf1207380f default }" containerID=555b9f2cdc43135bc7d4306ae3bdb9961c8bfd46c97f21c430a80dd1ef1dc4c2 datapathConfiguration="&{false false false false false }" interface=lxccb9305cd563b k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=555b9f2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=555b9f2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=555b9f2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=3730 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=555b9f2cdc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=3730 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=555b9f2cdc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3244 identity=3730 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=555b9f2cdc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3244 identity=3730 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd subsys=daemon level=info msg="Delete endpoint request" containerID=555b9f2cdc endpointID=3244 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-tq6nd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=aa855a88-089b-44d7-852c-9b8892c94a6a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=555b9f2cdc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3244 identity=3730 ipv4=10.0.0.22 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq6nd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 a6bb0ae2-7c09-4395-a547-80d7ca8aff4e default }" containerID=495d4e41deb0bb9f9bd9b3244307bd5dff87205122c58077b9556170cc650312 datapathConfiguration="&{false false false false false }" interface=lxc45afcdce6074 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=495d4e41de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.127 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=495d4e41de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.127 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=495d4e41de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=495d4e41de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=34247 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.127 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=495d4e41de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=34247 ipv4=10.0.0.127 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=495d4e41de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=956 identity=34247 ipv4=10.0.0.127 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=495d4e41de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=956 identity=34247 ipv4=10.0.0.127 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jsfwd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 bc9ab8dc-a1e6-4ff3-af0f-011bbbe3cd06 default }" containerID=04e1c5fa4eb5ceda4ddfdb2a78bb14f5fc4de0da654b7152cd665c9454efde6c datapathConfiguration="&{false false false false false }" interface=lxc57bee7755338 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04e1c5fa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04e1c5fa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04e1c5fa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=39543 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04e1c5fa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=39543 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04e1c5fa4e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=243 identity=39543 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=04e1c5fa4e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=243 identity=39543 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04e1c5fa4e endpointID=243 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-4mjrt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=5af00bd2-0000-417f-8a55-3d2f2673207a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=04e1c5fa4e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=243 identity=39543 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-4mjrt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7d3a7a5c-1a51-40be-a3fd-6519b2b4ce9f] Description:}]" policyAddRequest=3ed50953-caac-47ff-8b73-46448e04a96f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3ed50953-caac-47ff-8b73-46448e04a96f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=995cd947-e992-419c-bad5-4eecac31c692] Description:}]" policyAddRequest=078046df-246f-4e67-b796-14d2819f7978 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=078046df-246f-4e67-b796-14d2819f7978 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.74 e3935d98-a12c-4fdb-91f9-87f6afc740e9 default }" containerID=74b25a2d2e324bb9cabaea2798c652828a097bae019d4d534ed218dd5e8337dc datapathConfiguration="&{false false false false false }" interface=lxc764961de2a8e k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-96d8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74b25a2d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-96d8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74b25a2d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-96d8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74b25a2d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=26637 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-96d8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74b25a2d2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=26637 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-96d8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74b25a2d2e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=879 identity=26637 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-96d8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=74b25a2d2e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=879 identity=26637 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-96d8b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 6b47e1f5-5ba2-4314-a567-4c86d109a25d default }" containerID=4a87c43c25efa8d1ff767ff6de524ab3e7eb7f75dfc2c702994eea7065d391ea datapathConfiguration="&{false false false false false }" interface=lxc103a4299fb04 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-lpmx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a87c43c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2208 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-lpmx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a87c43c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2208 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-lpmx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a87c43c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2208 identity=50519 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-lpmx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a87c43c25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2208 identity=50519 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-lpmx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a87c43c25 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2208 identity=50519 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-lpmx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a87c43c25 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2208 identity=50519 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-lpmx7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 68190b82-8f52-4428-a518-1a6ce07b22ca default }" containerID=562dc0048af2db040417637f4335112bad4eb89e766d8c27593cbf014f043b79 datapathConfiguration="&{false false false false false }" interface=lxc33eea3a402d9 k8sPodName=openstack/pxc-operator-7cff949c8b-hkjgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=562dc0048a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hkjgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=562dc0048a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hkjgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=562dc0048a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=42962 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hkjgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=562dc0048a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=42962 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hkjgd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=562dc0048a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2683 identity=42962 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hkjgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=562dc0048a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2683 identity=42962 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hkjgd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 77078efe-5b74-4039-a2d5-6524d05a0bc1 default }" containerID=54dd3dd4985dca85d74068a4e871a31bfd0e80aacceca53249e449fb17fcc5a9 datapathConfiguration="&{false false false false false }" interface=lxc066b84363e04 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54dd3dd498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54dd3dd498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54dd3dd498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identity=49934 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=54dd3dd498 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identity=49934 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54dd3dd498 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1860 identity=49934 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=54dd3dd498 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1860 identity=49934 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 7b246ec8-2b27-41a0-b636-1e227327d538 default }" containerID=758dcedbf8add397db6d749c17ceea9cfa625019af91ad078e95bba7798de561 datapathConfiguration="&{false false false false false }" interface=lxc66c27a167ced k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=758dcedbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=758dcedbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=758dcedbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=758dcedbf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=35706 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=758dcedbf8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2136 identity=35706 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e subsys=endpoint level=info msg="Successful endpoint creation" containerID=758dcedbf8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2136 identity=35706 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=758dcedbf8 endpointID=2136 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=758dcedbf8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2136 identity=35706 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-563938a5-d7bc-442f-a86b-96dad7576e6e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 7cb0da97-6dd8-4ef0-b4f0-2e4e4772e5fa default }" containerID=df6fc0e0053658f6a596a44ea0b3eeb5c8461c7ba54dfeeb5812a2f0f1a9cd57 datapathConfiguration="&{false false false false false }" interface=lxc12d8bf97fd19 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df6fc0e005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df6fc0e005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df6fc0e005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=31235 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df6fc0e005 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=31235 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=df6fc0e005 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2525 identity=31235 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df6fc0e005 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2525 identity=31235 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=36991d95-0d7f-49bf-ad19-362fb4e84124] Description:}]" policyAddRequest=85b4a70e-3940-438c-aaa6-206175c99074 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=85b4a70e-3940-438c-aaa6-206175c99074 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 d2c86026-8653-415d-bb5c-253f7bee8fe0 default }" containerID=4ddf2b723dc67334451a823eaeffcc9619dd1407744731c0341296a45cd7a698 datapathConfiguration="&{false false false false false }" interface=lxc60c7060530bb k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ddf2b723d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ddf2b723d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ddf2b723d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ddf2b723d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=35706 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ddf2b723d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3933 identity=35706 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ddf2b723d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3933 identity=35706 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c subsys=daemon level=info msg="Delete endpoint request" containerID=4ddf2b723d endpointID=3933 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4ddf2b723d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3933 identity=35706 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f5b3909-6bb5-4352-a5ac-6eeef2a6958c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 6d7324be-34cc-4d27-aa97-a965fd22a695 default }" containerID=bf663246a6e49ff0dc78e070f1c1f52f2efcd2f42462218a98476fe28665e746 datapathConfiguration="&{false false false false false }" interface=lxcc07ba1816115 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf663246a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf663246a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf663246a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=5923 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf663246a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1414 identity=5923 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf663246a6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1414 identity=5923 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf663246a6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1414 identity=5923 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e17fd3cf-d88a-4537-9e3b-965bb80bcc41] Description:}]" policyAddRequest=7e4ebbf3-3b33-4918-a65c-8baa525e06c9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7e4ebbf3-3b33-4918-a65c-8baa525e06c9 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.248 7465223b-dd6a-4b56-9fac-750d29bde286 default }" containerID=7dd662f7be09a11895bcbfdee7557198e665847503cc79f2c07720a0019d6016 datapathConfiguration="&{false false false false false }" interface=lxc1b4a4a5fe7e5 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dd662f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.248 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dd662f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.248 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dd662f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=19964 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.248 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dd662f7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=19964 ipv4=10.0.0.248 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7dd662f7be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=170 identity=19964 ipv4=10.0.0.248 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dd662f7be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=19964 ipv4=10.0.0.248 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00970213859618272 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.210 74cd5a90-0a0d-456a-ae89-3493aea853a9 default }" containerID=1c48c20daa3d02e6cb08c36e42a08e37ff2fbf3ae50e8f96c237e3c241205615 datapathConfiguration="&{false false false false false }" interface=lxc0e3ae2aecc04 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9cnw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c48c20daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9cnw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c48c20daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9cnw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.163 ed833660-2e5a-4865-9b67-fccc66317b5f default }" containerID=51719fd641ae4a9f4f661c3bced52780bf28728a228830b94a6303e8ca50a8c2 datapathConfiguration="&{false false false false false }" interface=lxc254298bebaca k8sPodName=monitoring/node-feature-discovery-worker-hk7wp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51719fd641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hk7wp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51719fd641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hk7wp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c48c20daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=4823 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9cnw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c48c20daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=4823 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9cnw8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=51719fd641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hk7wp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51719fd641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=7398 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hk7wp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51719fd641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=7398 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hk7wp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 c50fe91b-3d41-43f5-8d0f-846c7325628b default }" containerID=6fbfc794517ac8daf634514c90e978cc16517313defdd19ecaf603cfef3bd307 datapathConfiguration="&{false false false false false }" interface=lxc5c7ecc4200c3 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sgqzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fbfc79451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sgqzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fbfc79451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sgqzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fbfc79451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identity=7067 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sgqzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fbfc79451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=669 identity=7067 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sgqzz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c48c20daa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=447 identity=4823 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9cnw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c48c20daa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=447 identity=4823 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9cnw8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=51719fd641 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1830 identity=7398 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hk7wp subsys=endpoint level=info msg="Successful endpoint creation" containerID=51719fd641 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=7398 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-hk7wp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6fbfc79451 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=669 identity=7067 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sgqzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fbfc79451 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=669 identity=7067 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-sgqzz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 d8a3e289-e349-4947-b11e-fed4661dcf48 default }" containerID=674e9dff3218aed8ed40b6c949426773a9bc0281c71a57f2787f1bea5f562a8a datapathConfiguration="&{false false false false false }" interface=lxc75957e18f918 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqhdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=674e9dff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqhdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=674e9dff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqhdd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=674e9dff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=57772 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqhdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=674e9dff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4029 identity=57772 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqhdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=674e9dff32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4029 identity=57772 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqhdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=674e9dff32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4029 identity=57772 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-nqhdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2327 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02327 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02327 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02327 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02327:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2327 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 75b4048c-fd86-44da-8fca-17449a8eab6f default }" containerID=77c2420e594232577c324dae2d98fd7c2b778ce0f85d5415f0cf2f98e64218f7 datapathConfiguration="&{false false false false false }" interface=lxc53d2822eab43 k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77c2420e59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77c2420e59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77c2420e59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=10633 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77c2420e59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=10633 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77c2420e59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=222 identity=10633 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=77c2420e59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=222 identity=10633 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77c2420e59 endpointID=222 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-b4mbj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3d723cfd-5ab8-455d-b6de-61a85447243b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=77c2420e59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=222 identity=10633 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b4mbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 d2b96a6d-ec7f-4437-91f6-77e3e07d3aa4 default }" containerID=e61313162296d494857f0686570bc9d38cf4f84d507f1bcd8e864e15c1c28363 datapathConfiguration="&{false false false false false }" interface=lxc0a54571e469d k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jk26f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e613131622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jk26f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 e6de91c3-fe80-4b79-81a8-0638f871d7ca default }" containerID=9b4c11df5e07c527b25329a1cbef26e13eaab6e93bbad0ac987c4ace5bcc078e datapathConfiguration="&{false false false false false }" interface=lxc69f4aacef244 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=e613131622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jk26f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=9b4c11df5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b4c11df5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e613131622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=36133 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jk26f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e613131622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=36133 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jk26f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=9b4c11df5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b4c11df5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=45130 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b4c11df5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=45130 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 341c4005-265f-4c30-ac6c-bcce37f3eb29 default }" containerID=99c79a4263c7af3a2e4f3dc8f3cdee0a5c0a483da26b95e15e2f50e4f286742b datapathConfiguration="&{false false false false false }" interface=lxc97914374274e k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb6df7d64-hq7q7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99c79a4263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb6df7d64-hq7q7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99c79a4263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb6df7d64-hq7q7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99c79a4263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identity=23010 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb6df7d64-hq7q7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99c79a4263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identity=23010 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb6df7d64-hq7q7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e613131622 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2687 identity=36133 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jk26f subsys=endpoint level=info msg="Successful endpoint creation" containerID=e613131622 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2687 identity=36133 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jk26f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b4c11df5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1071 identity=45130 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b4c11df5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=45130 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rw7px subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=99c79a4263 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=350 identity=23010 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb6df7d64-hq7q7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99c79a4263 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=350 identity=23010 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb6df7d64-hq7q7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 ef10c7b1-ce63-4aa3-84bf-ac9112eac27c default }" containerID=511f4cdc9d19122a6d283b2ad1e54f921b0c8a94319018bb30097cdd2e2a33ce datapathConfiguration="&{false false false false false }" interface=lxc215e1286ae41 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=511f4cdc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=511f4cdc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=511f4cdc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=4791 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=511f4cdc9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=4791 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=511f4cdc9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3905 identity=4791 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=511f4cdc9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3905 identity=4791 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=511f4cdc9d endpointID=3905 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-6k7g8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8bead431-b5fa-424d-ab7d-5aaa2784e553 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=511f4cdc9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3905 identity=4791 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-6k7g8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 a72f800f-b6c0-4bbb-8423-a13bfc5cf3a1 default }" containerID=1396fc28a65b33dca790f4f298b0f6143cf1ef6bbbe89a014e8266d848a25b0a datapathConfiguration="&{false false false false false }" interface=lxcd29d224aa6c9 k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1396fc28a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1396fc28a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1396fc28a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1396fc28a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=35706 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1396fc28a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1910 identity=35706 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1396fc28a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=35706 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 25fae889-d761-4304-8069-c686308c3f04 default }" containerID=eaf5e9e7c38091e3756e390e468cfa3db5cfc067da4e976286fd554a1d2711b5 datapathConfiguration="&{false false false false false }" interface=lxcc5483ab65dc6 k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf5e9e7c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf5e9e7c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eaf5e9e7c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf5e9e7c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=35706 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaf5e9e7c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3115 identity=35706 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf5e9e7c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3115 identity=35706 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca subsys=daemon level=info msg="Delete endpoint request" containerID=eaf5e9e7c3 endpointID=3115 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=1396fc28a6 endpointID=1910 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=eaf5e9e7c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3115 identity=35706 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-29781333-50f2-4b13-b67c-0c02683e4fca subsys=endpoint level=info msg="Removed endpoint" containerID=1396fc28a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=35706 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1afba5ed-807a-40cd-8483-4bd6da831938 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 482c549b-31c0-4129-bacd-52354cdd4684 default }" containerID=a8251bccce954cf3ed2a40fcac3f97c2c49487d1f07bc905736cacd1d631f1e0 datapathConfiguration="&{false false false false false }" interface=lxcba1cde395af5 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8251bccce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8251bccce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8251bccce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 identity=33847 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8251bccce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2765 identity=33847 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8251bccce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2765 identity=33847 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8251bccce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2765 identity=33847 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 5b82ae28-3d01-4a75-bcdb-6ebe30f5c40b default }" containerID=dba7dc45d7953b0e311fada1c7dfbdbacd0bbfb61b62efd9f106de25f9571944 datapathConfiguration="&{false false false false false }" interface=lxc0f56652c435f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dba7dc45d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dba7dc45d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dba7dc45d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identity=8090 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dba7dc45d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identity=8090 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dba7dc45d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2901 identity=8090 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dba7dc45d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2901 identity=8090 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.251 93aa48c8-ca85-45bc-a442-3af11f6500cc default }" containerID=d0a23594622e1880bbd43c5586bcc001c54f96e17228003c81c65ed5dc6e5148 datapathConfiguration="&{false false false false false }" interface=lxc77bdfe68b793 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0a2359462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2746 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0a2359462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2746 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0a2359462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2746 identity=22559 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0a2359462 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2746 identity=22559 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 e0ece764-0610-409d-8322-42c7b6a491a1 default }" containerID=242ba0cd6e09e09b9f0338588d77084bc078c3e49dac9d87b023176a0021bff1 datapathConfiguration="&{false false false false false }" interface=lxcc05fb058fe01 k8sPodName=monitoring/loki-gateway-cf54cb88c-dj5vr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=242ba0cd6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj5vr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=242ba0cd6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj5vr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=242ba0cd6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=524 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj5vr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=242ba0cd6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=524 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj5vr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0a2359462 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2746 identity=22559 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0a2359462 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2746 identity=22559 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 fdda5dde-5a73-4fe3-8be2-8120075f15a6 default }" containerID=50e3b14cebf82ceb1ab86bd09fb530bb893bd563a349992c7cabf741add9ee4b datapathConfiguration="&{false false false false false }" interface=lxcffd1ed05d06e k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50e3b14ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50e3b14ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50e3b14ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=44864 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50e3b14ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=44864 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=242ba0cd6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2309 identity=524 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj5vr subsys=endpoint level=info msg="Successful endpoint creation" containerID=242ba0cd6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2309 identity=524 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dj5vr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=50e3b14ceb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=944 identity=44864 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50e3b14ceb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=944 identity=44864 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 fa7447be-d9d6-4e27-8cec-8761ad5f8c43 default }" containerID=2c8acfb76dd0b0bb9290599327fcf9e9e0dd6668b54f658f3330e7d16315d521 datapathConfiguration="&{false false false false false }" interface=lxceb683b259bfb k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c8acfb76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c8acfb76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c8acfb76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c8acfb76d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1695 identity=35706 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c8acfb76d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1695 identity=35706 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c8acfb76d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1695 identity=35706 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 327c9614-c10d-4c2a-8779-c3e44f576686 default }" containerID=c04d8266b6ff169b0edd53c2ea80b0c2f83bf45bd5b06f8a626a433f87794780 datapathConfiguration="&{false false false false false }" interface=lxce14518adde67 k8sPodName=monitoring/vector-brbns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c04d8266b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-brbns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c04d8266b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-brbns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c04d8266b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=36779 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-brbns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c04d8266b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=391 identity=36779 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-brbns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c04d8266b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=391 identity=36779 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-brbns subsys=endpoint level=info msg="Successful endpoint creation" containerID=c04d8266b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=391 identity=36779 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/vector-brbns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c8acfb76d endpointID=1695 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2c8acfb76d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1695 identity=35706 ipv4=10.0.0.182 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-111e8baf-d9b0-4122-8805-a256fc5107ef subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 f19bd699-ff45-41dc-8b4b-6598f6dfa72d default }" containerID=08107da61efad7795504187b885fbd3a571da5a760fd59ded292475cdc5b054d datapathConfiguration="&{false false false false false }" interface=lxcf6d4e4e4cc2b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08107da61e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08107da61e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08107da61e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=17574 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=08107da61e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=17574 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08107da61e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=17574 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08107da61e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=17574 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 94d3f875-774f-4c65-9b05-9c490b869af1 default }" containerID=776db813f8ac7d78e3ded88ca471f5357df098ffdb082b0b492b4189ea48e70e datapathConfiguration="&{false false false false false }" interface=lxcb22f0a19699c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kchv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=776db813f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kchv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=776db813f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kchv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=776db813f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=277 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kchv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=776db813f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=277 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kchv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=776db813f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1942 identity=277 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kchv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=776db813f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1942 identity=277 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-kchv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 c0a028bd-674e-44c6-8991-b82055d226c3 default }" containerID=f330418961a873a3b7fec6aeda18609aac7f586720ab88103ff70d740ac05e9c datapathConfiguration="&{false false false false false }" interface=lxc72b0b2d2c932 k8sPodName=openstack/memcached-memcached-6479589586-6kllm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f330418961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6kllm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f330418961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6kllm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f330418961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6kllm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f330418961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=2955 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6kllm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f330418961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=2955 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6kllm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f330418961 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2841 identity=2955 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6kllm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f330418961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2841 identity=2955 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6kllm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 5f3be88a-56f0-4818-bf14-bcc10761945c default }" containerID=c04f43dfbe9c546c50214245cb7b12eb3c99397e57fe62ebdf46c1a386b16d4c datapathConfiguration="&{false false false false false }" interface=lxc10d728d35405 k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c04f43dfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c04f43dfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c04f43dfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c04f43dfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=35706 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c04f43dfbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=535 identity=35706 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c04f43dfbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=35706 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 subsys=daemon level=info msg="Delete endpoint request" containerID=c04f43dfbe endpointID=535 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c04f43dfbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=535 identity=35706 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-766e0683-5ba8-435b-855f-29d74e5cb9e3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 2a538ac6-af8e-474c-8a0a-9a626cefddd5 default }" containerID=9c5cf28e894059ea81648e908f609e9fcc5b56e5c6d14a084c86bfca0aeadf5a datapathConfiguration="&{false false false false false }" interface=lxc4168d803d1f2 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c5cf28e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c5cf28e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c5cf28e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=35947 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c5cf28e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=35947 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9c5cf28e89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=532 identity=35947 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c5cf28e89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=532 identity=35947 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 0e32d4b4-ea0c-4fb6-8ef9-1ef8fb88c634 default }" containerID=b6c3c84667121b5e5b4db428e9cee60877d8674ab6e89faa353f7218ad075d52 datapathConfiguration="&{false false false false false }" interface=lxccaad867aef0a k8sPodName=openstack/keystone-api-59db99b998-5zrc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6c3c84667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-api-59db99b998-5zrc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6c3c84667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-api-59db99b998-5zrc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6c3c84667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=7762 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-api-59db99b998-5zrc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6c3c84667 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=7762 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-api-59db99b998-5zrc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 97ed661b-10c6-49ee-8cb7-59f8c5989295 default }" containerID=57a417fb550c4196379c12516b9b08a08cf0ccacc4275e46e5e83bd95f23d257 datapathConfiguration="&{false false false false false }" interface=lxcefe24ad8ae89 k8sPodName=openstack/keystone-credential-setup-pt49g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57a417fb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-credential-setup-pt49g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57a417fb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-credential-setup-pt49g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57a417fb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=1696 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-credential-setup-pt49g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57a417fb55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=1696 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-credential-setup-pt49g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6c3c84667 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3358 identity=7762 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-api-59db99b998-5zrc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6c3c84667 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3358 identity=7762 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-api-59db99b998-5zrc6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=57a417fb55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1138 identity=1696 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-credential-setup-pt49g subsys=endpoint level=info msg="Successful endpoint creation" containerID=57a417fb55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1138 identity=1696 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-credential-setup-pt49g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57a417fb55 endpointID=1138 k8sNamespace=openstack k8sPodName=keystone-credential-setup-pt49g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=23e0f3c6-4013-4717-9656-46683f56b9ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=57a417fb55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1138 identity=1696 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-credential-setup-pt49g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 6a2e946e-f4c2-49f9-b9e6-5c1c2e133916 default }" containerID=795e027970fed8ae67fb633e4d326dd1e448527782900238d902e5b2049fbb18 datapathConfiguration="&{false false false false false }" interface=lxc310a43304976 k8sPodName=openstack/keystone-db-init-wmlrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=795e027970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=795e027970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2526147d-21ea-49fb-aa43-c875a8212956,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=2526147d-21ea-49fb-aa43-c875a8212956,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=795e027970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2526147d-21ea-49fb-aa43-c875a8212956;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=2526147d-21ea-49fb-aa43-c875a8212956;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=795e027970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 identity=64418 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2526147d-21ea-49fb-aa43-c875a8212956,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=2526147d-21ea-49fb-aa43-c875a8212956,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=795e027970 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 identity=64418 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=795e027970 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1714 identity=64418 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=795e027970 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1714 identity=64418 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=795e027970 endpointID=1714 k8sNamespace=openstack k8sPodName=keystone-db-init-wmlrd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2526147d-21ea-49fb-aa43-c875a8212956 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=2526147d-21ea-49fb-aa43-c875a8212956 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=795e027970 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1714 identity=64418 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-wmlrd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 47e32ea6-3ef8-4fea-b006-ad71688116db default }" containerID=3acf436f791350441df86852e2014f6fd2323781957e827ad86dd062a6754fb9 datapathConfiguration="&{false false false false false }" interface=lxcb3bcb00f4e23 k8sPodName=openstack/keystone-fernet-setup-4k4jw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3acf436f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-fernet-setup-4k4jw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3acf436f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-fernet-setup-4k4jw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3acf436f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=59553 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-fernet-setup-4k4jw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3acf436f79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1408 identity=59553 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-fernet-setup-4k4jw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3acf436f79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1408 identity=59553 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-fernet-setup-4k4jw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3acf436f79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1408 identity=59553 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-fernet-setup-4k4jw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3acf436f79 endpointID=1408 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-4k4jw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=142b092f-7aae-4d85-a247-e2cce5839ddc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3acf436f79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1408 identity=59553 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/keystone-fernet-setup-4k4jw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 50e22a41-06b8-4679-ac57-bfd3c49fd583 default }" containerID=db6ce102baa48a8a0d4383def7b22f7cc519fb4632e29027a679eb4ab6e68afe datapathConfiguration="&{false false false false false }" interface=lxc73db7171e034 k8sPodName=openstack/keystone-db-sync-j5pq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db6ce102ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-db-sync-j5pq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db6ce102ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-db-sync-j5pq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=db6ce102ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identity=1476 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-db-sync-j5pq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db6ce102ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identity=1476 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-db-sync-j5pq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db6ce102ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2709 identity=1476 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-db-sync-j5pq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db6ce102ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2709 identity=1476 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-db-sync-j5pq5 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db6ce102ba endpointID=2709 k8sNamespace=openstack k8sPodName=keystone-db-sync-j5pq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=72eb547f-3bba-4a7a-b0b2-38827dba7523 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=db6ce102ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2709 identity=1476 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-db-sync-j5pq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 5893091c-e489-4307-b270-053e18910413 default }" containerID=a15267ffa42804e78c8d48208f8e4905c3232695481d5349fdd30ae3b151b61a datapathConfiguration="&{false false false false false }" interface=lxca73c02d58fcf k8sPodName=openstack/keystone-rabbit-init-fh7fk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a15267ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a15267ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a15267ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a15267ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=48606 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a15267ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1351 identity=48606 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a15267ffa4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1351 identity=48606 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a15267ffa4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1351 identity=48606 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a15267ffa4 endpointID=1351 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-fh7fk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5afa5a1d-6c45-4a84-83ad-17fc805b4d42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a15267ffa4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1351 identity=48606 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-rabbit-init-fh7fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 293a4393-2d95-40bf-9c16-e09605c0bb59 default }" containerID=68b30ab10923a470c8cd6af8d5f201023437799e80b57d9577fba08db279fcae datapathConfiguration="&{false false false false false }" interface=lxca05b66352823 k8sPodName=openstack/keystone-domain-manage-5vgzv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68b30ab109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68b30ab109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=68b30ab109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68b30ab109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=29467 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68b30ab109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3420 identity=29467 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68b30ab109 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3420 identity=29467 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv subsys=endpoint level=info msg="Successful endpoint creation" containerID=68b30ab109 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3420 identity=29467 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68b30ab109 endpointID=3420 k8sNamespace=openstack k8sPodName=keystone-domain-manage-5vgzv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3fb55ef5-d5ea-483c-b81d-56616543b822 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=68b30ab109 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3420 identity=29467 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-5vgzv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 bb2c5904-f267-4f77-8fb2-0ca5d4bf1bd2 default }" containerID=6091d8bd743554a00cd8edddda235aefa76575f8aa0201a542836c2bbe8503a2 datapathConfiguration="&{false false false false false }" interface=lxcd2f16cafb2d8 k8sPodName=openstack/keystone-bootstrap-btmzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6091d8bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-bootstrap-btmzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6091d8bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-bootstrap-btmzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6091d8bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=31709 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-bootstrap-btmzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6091d8bd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=31709 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-bootstrap-btmzn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6091d8bd74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2269 identity=31709 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-bootstrap-btmzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6091d8bd74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2269 identity=31709 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-bootstrap-btmzn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6091d8bd74 endpointID=2269 k8sNamespace=openstack k8sPodName=keystone-bootstrap-btmzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0125c215-d6fa-4fdc-8158-65276fbee9de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6091d8bd74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2269 identity=31709 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-bootstrap-btmzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 2fb212e2-663c-47bc-b4e7-9cc0fe20cf58 default }" containerID=783e84a9c4d15fc1ee87d3080486facec4f90e1a90e289a5313482c0a3b73edf datapathConfiguration="&{false false false false false }" interface=lxc9d81f36906d2 k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=783e84a9c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=783e84a9c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=783e84a9c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=783e84a9c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=35706 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=783e84a9c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=710 identity=35706 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=783e84a9c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=710 identity=35706 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 subsys=daemon level=info msg="Delete endpoint request" containerID=783e84a9c4 endpointID=710 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=783e84a9c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=710 identity=35706 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dca26d43-8b3f-45f8-aa23-6bd99daf6e56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 d3a42e5e-5713-4922-b907-af218d9b5b4f default }" containerID=055a5a393fe8c39e0c567388a21696f9046a8725bc603a45ea79839d7c1dd7f3 datapathConfiguration="&{false false false false false }" interface=lxcead907bb4950 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=055a5a393f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=055a5a393f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=055a5a393f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 identity=12924 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=055a5a393f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3410 identity=12924 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=055a5a393f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3410 identity=12924 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=055a5a393f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3410 identity=12924 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 8dabf617-5e35-4422-89d7-a90f2f391638 default }" containerID=0746451d0f7285f970e1dea1e893ba7de42670f742b256ea2028c11ac95e46a2 datapathConfiguration="&{false false false false false }" interface=lxcd352bc0eb54a k8sPodName=openstack/barbican-api-6c4fd97784-gdfws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0746451d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-api-6c4fd97784-gdfws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0746451d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-api-6c4fd97784-gdfws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0746451d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identity=14955 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-api-6c4fd97784-gdfws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0746451d0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identity=14955 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-api-6c4fd97784-gdfws subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 65f9ab6e-7c6f-4a68-948b-adea5135b186 default }" containerID=4bf756c4150e83db67abe8c1b54612c31963069c87953fad430b1c436a5ae823 datapathConfiguration="&{false false false false false }" interface=lxc7f21af3defff k8sPodName=openstack/barbican-db-init-pxwnm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bf756c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-db-init-pxwnm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bf756c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-db-init-pxwnm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bf756c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identity=40096 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-db-init-pxwnm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bf756c415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2709 identity=40096 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-db-init-pxwnm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0746451d0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1828 identity=14955 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-api-6c4fd97784-gdfws subsys=endpoint level=info msg="Successful endpoint creation" containerID=0746451d0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1828 identity=14955 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-api-6c4fd97784-gdfws subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4bf756c415 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2709 identity=40096 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-db-init-pxwnm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bf756c415 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2709 identity=40096 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-db-init-pxwnm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4bf756c415 endpointID=2709 k8sNamespace=openstack k8sPodName=barbican-db-init-pxwnm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=ad479fd2-0ecc-4a47-b0e2-b7417be57447 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4bf756c415 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2709 identity=40096 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-db-init-pxwnm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 92fddbdf-0321-45bb-b8dc-18fa6cc9f56e default }" containerID=dd327bf1f8fb3d9437490e1ba82eda9c5fbd5d8271672f29b25a1e33ed4186ad datapathConfiguration="&{false false false false false }" interface=lxcb08038ea9f46 k8sPodName=openstack/barbican-db-sync-g7tcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd327bf1f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-g7tcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd327bf1f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-g7tcc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd327bf1f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=5028 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-g7tcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd327bf1f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=5028 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-g7tcc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd327bf1f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=420 identity=5028 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-g7tcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd327bf1f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=5028 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-g7tcc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd327bf1f8 endpointID=420 k8sNamespace=openstack k8sPodName=barbican-db-sync-g7tcc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=013c2018-0e8e-4b59-8f02-5141ca031249 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=dd327bf1f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=5028 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-db-sync-g7tcc subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03605245715367863 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.129 414cd009-5d2c-4d8d-8347-6f8f3e7f2808 default }" containerID=df5898e073f6e272b80d523ab5fed397042b2efae8e43f9bbaa983ced94ecadf datapathConfiguration="&{false false false false false }" interface=lxc1150a9ab90f2 k8sPodName=openstack/barbican-rabbit-init-w7gmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df5898e073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-w7gmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df5898e073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-w7gmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df5898e073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=4055 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-w7gmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df5898e073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1510 identity=4055 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-w7gmx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=df5898e073 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1510 identity=4055 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-w7gmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=df5898e073 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1510 identity=4055 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-w7gmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df5898e073 endpointID=1510 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-w7gmx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7966e536-94a9-4c5c-8d1d-e97fc46309d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df5898e073 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1510 identity=4055 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-rabbit-init-w7gmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 a9d1fd7b-a969-4d36-a6e0-0b409add42dc default }" containerID=2007c7042b197876b01f68ab08d1ee2b5e22af666bc1036c269f7366201c1b70 datapathConfiguration="&{false false false false false }" interface=lxc8d530f1900b7 k8sPodName=openstack/barbican-ks-service-cvkh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2007c7042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-cvkh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2007c7042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-cvkh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2007c7042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=3965 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-cvkh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2007c7042b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=3965 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-cvkh9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2007c7042b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=874 identity=3965 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-cvkh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2007c7042b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=874 identity=3965 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-cvkh9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2007c7042b endpointID=874 k8sNamespace=openstack k8sPodName=barbican-ks-service-cvkh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a4090b58-5824-4367-8c6e-55f4ca1b8372 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2007c7042b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=874 identity=3965 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-cvkh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 d172e2dc-ab8e-4b48-b553-609b3686b5d8 default }" containerID=2d3ea5cf23bd4072d93556af15751e879c993a15169cd487f68146b64d7456a9 datapathConfiguration="&{false false false false false }" interface=lxcd72bec00fa7c k8sPodName=openstack/barbican-ks-endpoints-4q8l8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d3ea5cf23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d3ea5cf23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2d3ea5cf23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d3ea5cf23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identity=4929 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d3ea5cf23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identity=4929 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d3ea5cf23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3922 identity=4929 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d3ea5cf23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3922 identity=4929 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d3ea5cf23 endpointID=3922 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-4q8l8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0cb8809a-2d32-481c-a12f-9edfc5a977f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2d3ea5cf23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3922 identity=4929 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4q8l8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 f4c31ffd-385f-4c15-9dec-40708fdf9689 default }" containerID=ecf82a774ad2f46376ee68dce024385bef78be8f5ea354f39e4e4516aec5a9b7 datapathConfiguration="&{false false false false false }" interface=lxc4b647199cd5f k8sPodName=openstack/barbican-ks-user-hx4tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecf82a774a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-hx4tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecf82a774a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=af78b583-4684-467c-8c0a-2643341441f0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=af78b583-4684-467c-8c0a-2643341441f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-hx4tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=af78b583-4684-467c-8c0a-2643341441f0;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=af78b583-4684-467c-8c0a-2643341441f0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ecf82a774a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identity=21027 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=af78b583-4684-467c-8c0a-2643341441f0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=af78b583-4684-467c-8c0a-2643341441f0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-hx4tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecf82a774a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=627 identity=21027 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-hx4tk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecf82a774a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=627 identity=21027 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-hx4tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecf82a774a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=627 identity=21027 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-hx4tk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ecf82a774a endpointID=627 k8sNamespace=openstack k8sPodName=barbican-ks-user-hx4tk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=af78b583-4684-467c-8c0a-2643341441f0 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=af78b583-4684-467c-8c0a-2643341441f0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ecf82a774a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=627 identity=21027 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/barbican-ks-user-hx4tk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.82 f3e626ab-ce6b-4a09-b667-c3820299a809 default }" containerID=e8826ced5939e0e27063ff6192732b71e3a6a64ea8744ef91b23288a9dd0396f datapathConfiguration="&{false false false false false }" interface=lxcd5de5aae1935 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dxzd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8826ced59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.82 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dxzd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8826ced59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.82 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dxzd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8826ced59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=51196 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.82 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dxzd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8826ced59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=51196 ipv4=10.0.0.82 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dxzd2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e8826ced59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=254 identity=51196 ipv4=10.0.0.82 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dxzd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8826ced59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=254 identity=51196 ipv4=10.0.0.82 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dxzd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 bff3ee73-46b9-4cf9-899f-e5aa568f6ff9 default }" containerID=9844587d0ef5e58132650b914add08afd427e79eaf11c5ec59007b55d61a83a0 datapathConfiguration="&{false false false false false }" interface=lxc0ed3d6519345 k8sPodName=openstack/rook-ceph-detect-version-vp8fd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9844587d0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vp8fd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9844587d0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vp8fd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9844587d0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=12210 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vp8fd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9844587d0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=12210 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vp8fd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9844587d0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2609 identity=12210 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vp8fd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9844587d0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2609 identity=12210 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vp8fd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9844587d0e endpointID=2609 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-vp8fd subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=ea6edd3d-4e42-42b2-a45e-78c6c751f8e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9844587d0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2609 identity=12210 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vp8fd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 1dc3c0f6-20d1-45dc-a6d4-8b9c5eca99e6 default }" containerID=ba25345e69c1017b0b2d60128d76ae56086d1973f67f0dad5df8addd83409e97 datapathConfiguration="&{false false false false false }" interface=lxc2550ff42f97f k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba25345e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba25345e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba25345e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=21530 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba25345e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=21530 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba25345e69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=991 identity=21530 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba25345e69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=991 identity=21530 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba25345e69 endpointID=991 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-nbk9b subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d126fae4-ae80-4b36-9c57-e7fca8a0776a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ba25345e69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=991 identity=21530 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nbk9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 4ee1a628-ad34-402e-a124-847baebc5889 default }" containerID=987f11d48cdc868b7e869d7fae1d68609e6768ae41aecc1950e2c9a421e7875b datapathConfiguration="&{false false false false false }" interface=lxc9fc4a85b700b k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=987f11d48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=987f11d48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=987f11d48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=35706 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=987f11d48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=35706 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=987f11d48c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=295 identity=35706 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d subsys=endpoint level=info msg="Successful endpoint creation" containerID=987f11d48c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=35706 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d subsys=daemon level=info msg="Delete endpoint request" containerID=987f11d48c endpointID=295 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=987f11d48c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=35706 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f12eb32-f5eb-4dd1-a3f1-16bf0e32dd3d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 da218efd-9243-44c1-82be-07dd95c429d4 default }" containerID=c8b5df4d078cd87d542fbacf0b604f75794b379f952616e9cc15aa417b0eb4e4 datapathConfiguration="&{false false false false false }" interface=lxcf638913de3f6 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8b5df4d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8b5df4d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c8b5df4d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c8b5df4d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identity=12046 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8b5df4d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identity=12046 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8b5df4d07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3651 identity=12046 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8b5df4d07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3651 identity=12046 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 16c9eb0a-9d4d-45d9-a63f-d21a21d87d4d default }" containerID=e61b63fee9147a5dbc173d1d0c848a2e054d0968dc146f4bbd705d24d09c7753 datapathConfiguration="&{false false false false false }" interface=lxc83f6677a29b1 k8sPodName=openstack/glance-db-init-ktmfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e61b63fee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ktmfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e61b63fee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ktmfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e61b63fee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=63476 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ktmfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e61b63fee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=63476 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ktmfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e61b63fee9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=918 identity=63476 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ktmfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e61b63fee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=918 identity=63476 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ktmfj subsys=daemon level=info msg="Delete endpoint request" containerID=e61b63fee9 endpointID=918 k8sNamespace=openstack k8sPodName=glance-db-init-ktmfj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=25cee729-f781-4940-bbdd-b9f2a49f73b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e61b63fee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=918 identity=63476 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-db-init-ktmfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 e8fbfad6-a2f4-4907-ba28-2b18fa492ae0 default }" containerID=dc65d743e06c7e2a1d23053dc90bed34c7df89b4f27b89bb5ea8776e78885bab datapathConfiguration="&{false false false false false }" interface=lxc7fe4a181a9e7 k8sPodName=openstack/glance-db-sync-8qgjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc65d743e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-8qgjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc65d743e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=498df496-b41d-46c9-b3f8-58127720891d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=498df496-b41d-46c9-b3f8-58127720891d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-8qgjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=498df496-b41d-46c9-b3f8-58127720891d;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=498df496-b41d-46c9-b3f8-58127720891d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc65d743e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=11959 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=498df496-b41d-46c9-b3f8-58127720891d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=498df496-b41d-46c9-b3f8-58127720891d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-8qgjj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dc65d743e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=11959 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-8qgjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc65d743e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2199 identity=11959 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-8qgjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc65d743e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=11959 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-8qgjj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 527c9398-565b-42ae-81fd-3aa11ee7e81e default }" containerID=2eaad1c12cf1a859ca066b1c737e718b198d621abce74adced6c4f197d5facf9 datapathConfiguration="&{false false false false false }" interface=lxc2dcc4bedcd5b k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gsvmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2eaad1c12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gsvmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2eaad1c12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gsvmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2eaad1c12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=4111 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gsvmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2eaad1c12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=4111 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gsvmf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 6adf436d-1379-47ed-b93a-b215ec26cadc default }" containerID=b389348a40d15acf0f23d94d6320b207a98c606a64cf0696bab7ac81a4bf4d25 datapathConfiguration="&{false false false false false }" interface=lxcd160defa6a40 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2lpd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b389348a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2lpd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b389348a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2lpd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b389348a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=24507 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2lpd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b389348a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=24507 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2lpd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2eaad1c12c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=919 identity=4111 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gsvmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2eaad1c12c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=4111 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-gsvmf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b389348a40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1509 identity=24507 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2lpd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b389348a40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1509 identity=24507 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2lpd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc65d743e0 endpointID=2199 k8sNamespace=openstack k8sPodName=glance-db-sync-8qgjj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=498df496-b41d-46c9-b3f8-58127720891d k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=498df496-b41d-46c9-b3f8-58127720891d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dc65d743e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=11959 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-db-sync-8qgjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 0608e050-8f5f-4547-8fd7-97fb1e71b1b3 default }" containerID=8c1e531476a13bc4c9abf187666fe185e3c594fc22e5e6f2e628067220c1079a datapathConfiguration="&{false false false false false }" interface=lxc63612724b490 k8sPodName=openstack/glance-rabbit-init-s9j6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c1e531476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-rabbit-init-s9j6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c1e531476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-rabbit-init-s9j6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c1e531476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=54792 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-rabbit-init-s9j6t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8c1e531476 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=54792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-rabbit-init-s9j6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c1e531476 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=22 identity=54792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-rabbit-init-s9j6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c1e531476 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=54792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-rabbit-init-s9j6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c1e531476 endpointID=22 k8sNamespace=openstack k8sPodName=glance-rabbit-init-s9j6t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=70df85d3-9f78-429b-9a8d-960ce66dc748 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8c1e531476 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=54792 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-rabbit-init-s9j6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 0f32725f-d515-4c46-9f1d-0ca144deba75 default }" containerID=03c4d78b001822f78909c5f687120e702209fbe366cc1f9716ef244b42d5cbeb datapathConfiguration="&{false false false false false }" interface=lxcb8a7d68d284d k8sPodName=openstack/glance-ks-service-gt45k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03c4d78b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03c4d78b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=03c4d78b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03c4d78b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=2098 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03c4d78b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=781 identity=2098 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03c4d78b00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=781 identity=2098 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k subsys=endpoint level=info msg="Successful endpoint creation" containerID=03c4d78b00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=2098 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03c4d78b00 endpointID=781 k8sNamespace=openstack k8sPodName=glance-ks-service-gt45k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=19fb50c1-5489-4d46-9f09-c07d83a2374b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=03c4d78b00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=781 identity=2098 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-service-gt45k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 68bae3bf-caec-4942-a331-e98c626c5df1 default }" containerID=5a45798e136e3776a9759d07388abd4a4b4300a29b819e85501f9b07f7f4df06 datapathConfiguration="&{false false false false false }" interface=lxc9cc66bab5d05 k8sPodName=openstack/glance-ks-endpoints-zxfrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a45798e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-zxfrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a45798e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=327f683c-bfc8-4c07-9146-180a5b343771,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=327f683c-bfc8-4c07-9146-180a5b343771,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-zxfrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=327f683c-bfc8-4c07-9146-180a5b343771;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=327f683c-bfc8-4c07-9146-180a5b343771;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a45798e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=26131 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=327f683c-bfc8-4c07-9146-180a5b343771,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=327f683c-bfc8-4c07-9146-180a5b343771,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-zxfrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a45798e13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=26131 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-zxfrs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a45798e13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=26131 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-zxfrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a45798e13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=26131 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-zxfrs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a45798e13 endpointID=41 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-zxfrs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=327f683c-bfc8-4c07-9146-180a5b343771 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=327f683c-bfc8-4c07-9146-180a5b343771 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5a45798e13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=26131 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-zxfrs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 51c69a01-00b1-4f45-8be1-98c2309eaea7 default }" containerID=4c4ee54eb8945085f3a362bfa8bc97e9963cb5b03d74f77fbdc1f187c2dd4a44 datapathConfiguration="&{false false false false false }" interface=lxc54e4eaa844f1 k8sPodName=openstack/glance-ks-user-xw9bj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c4ee54eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-user-xw9bj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c4ee54eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3086053d-0515-49e1-a698-1e06839add2b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3086053d-0515-49e1-a698-1e06839add2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-user-xw9bj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3086053d-0515-49e1-a698-1e06839add2b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3086053d-0515-49e1-a698-1e06839add2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c4ee54eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=23121 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3086053d-0515-49e1-a698-1e06839add2b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3086053d-0515-49e1-a698-1e06839add2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-user-xw9bj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c4ee54eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=23121 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-user-xw9bj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c4ee54eb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2795 identity=23121 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-user-xw9bj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c4ee54eb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2795 identity=23121 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-user-xw9bj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c4ee54eb8 endpointID=2795 k8sNamespace=openstack k8sPodName=glance-ks-user-xw9bj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3086053d-0515-49e1-a698-1e06839add2b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3086053d-0515-49e1-a698-1e06839add2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4c4ee54eb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2795 identity=23121 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-user-xw9bj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 99a772e0-1a5d-40c5-b42e-d7e163466ebb default }" containerID=6bf75a1b9c47fd35bedc1fd693901aca3c345eea52b88e67d71aedadd4a0ee33 datapathConfiguration="&{false false false false false }" interface=lxcf8f4f01e50d1 k8sPodName=openstack/glance-metadefs-load-ch8j9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bf75a1b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-ch8j9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bf75a1b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-ch8j9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bf75a1b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=1505 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-ch8j9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bf75a1b9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=1505 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-ch8j9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bf75a1b9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2639 identity=1505 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-ch8j9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bf75a1b9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=1505 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-ch8j9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bf75a1b9c endpointID=2639 k8sNamespace=openstack k8sPodName=glance-metadefs-load-ch8j9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=5cb9d4aa-1532-4b86-80be-d76010da80df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6bf75a1b9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=1505 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-ch8j9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 53123382-83bb-41a6-9d84-2a9bcbcfe503 default }" containerID=faccbc3f84e288c38cb341a6e2b730b8e4a3c3407fcd438c0e46f7691d7269e9 datapathConfiguration="&{false false false false false }" interface=lxc5a93f562e37d k8sPodName=openstack/glance-storage-init-72sx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faccbc3f84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-storage-init-72sx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faccbc3f84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-storage-init-72sx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=faccbc3f84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 identity=396 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-storage-init-72sx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faccbc3f84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3709 identity=396 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-storage-init-72sx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faccbc3f84 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3709 identity=396 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-storage-init-72sx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=faccbc3f84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3709 identity=396 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-storage-init-72sx8 subsys=daemon level=info msg="Delete endpoint request" containerID=faccbc3f84 endpointID=3709 k8sNamespace=openstack k8sPodName=glance-storage-init-72sx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=298195bb-1a9c-4e59-bae1-58a343e42494 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=faccbc3f84 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3709 identity=396 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-storage-init-72sx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 955f35be-cfce-438c-a53c-dc2aa942a73a default }" containerID=fad05f96bcae9e77fbfd9e21b5b47147b7d1d0b51e0b690aa074acdee9f4bf22 datapathConfiguration="&{false false false false false }" interface=lxc7a40a5c5e73e k8sPodName=openstack/glance-api-7cd97567d8-bhvhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fad05f96bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-api-7cd97567d8-bhvhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fad05f96bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-api-7cd97567d8-bhvhv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fad05f96bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identity=31239 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-api-7cd97567d8-bhvhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fad05f96bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2895 identity=31239 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-api-7cd97567d8-bhvhv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fad05f96bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2895 identity=31239 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-api-7cd97567d8-bhvhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fad05f96bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2895 identity=31239 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/glance-api-7cd97567d8-bhvhv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 3d8bdfa0-24b7-4611-9ee8-f81c2cd5b743 default }" containerID=aa778c90e3c347cf05100df9818ac2d9bb7fb84d90c1155ee5ec94fcb46bd236 datapathConfiguration="&{false false false false false }" interface=lxca195d4838c9d k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa778c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa778c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa778c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa778c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identity=51035 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa778c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3918 identity=51035 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 5ca729fc-8f3d-40f8-8b69-f39deea3c6c5 default }" containerID=cf42448c1a8ed3b2af5b537826c6a4136582b45f5bf3caa6680eb9e23c76a0f9 datapathConfiguration="&{false false false false false }" interface=lxc92004b1af4c8 k8sPodName=openstack/staffeln-db-init-2whf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf42448c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-2whf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf42448c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-2whf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf42448c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=8961 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-2whf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf42448c1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=8961 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-2whf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 b5b9c22d-baa7-49fc-ae5e-2f3f4f88816e default }" containerID=da8c776ff2a6e78b4c9542e2f8070192a3d8461ea721442080a2a4535b1e7117 datapathConfiguration="&{false false false false false }" interface=lxcd9d6293c45e6 k8sPodName=openstack/staffeln-api-5bc454785b-zkzxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da8c776ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-api-5bc454785b-zkzxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da8c776ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-api-5bc454785b-zkzxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da8c776ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=10315 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-api-5bc454785b-zkzxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da8c776ff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3446 identity=10315 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-api-5bc454785b-zkzxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa778c90e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3918 identity=51035 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa778c90e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3918 identity=51035 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/staffeln-conductor-5f4dd8577f-7qtsc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cf42448c1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1716 identity=8961 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-2whf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf42448c1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1716 identity=8961 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-2whf4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da8c776ff2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3446 identity=10315 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-api-5bc454785b-zkzxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=da8c776ff2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3446 identity=10315 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-api-5bc454785b-zkzxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf42448c1a endpointID=1716 k8sNamespace=openstack k8sPodName=staffeln-db-init-2whf4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=887e96c4-57aa-4b4b-a2e2-2a070025c2ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=cf42448c1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1716 identity=8961 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/staffeln-db-init-2whf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 1ff32583-7638-45ce-9cf2-9b1eac29118a default }" containerID=b23c88282e9ef00cdaedab862f05c9cb3cc1e4caa0671735f6a909b38d092a0e datapathConfiguration="&{false false false false false }" interface=lxcd74a27dfa02d k8sPodName=openstack/staffeln-db-sync-clw6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b23c88282e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-sync-clw6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b23c88282e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=08fd8a01-87d6-4e5c-9263-c7c0728cbf0f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=08fd8a01-87d6-4e5c-9263-c7c0728cbf0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-sync-clw6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b23c88282e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-sync-clw6v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=08fd8a01-87d6-4e5c-9263-c7c0728cbf0f;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=08fd8a01-87d6-4e5c-9263-c7c0728cbf0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b23c88282e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=24159 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=08fd8a01-87d6-4e5c-9263-c7c0728cbf0f,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=08fd8a01-87d6-4e5c-9263-c7c0728cbf0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-sync-clw6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b23c88282e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=24159 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-sync-clw6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b23c88282e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=653 identity=24159 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-sync-clw6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b23c88282e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=653 identity=24159 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/staffeln-db-sync-clw6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager