level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="938.352µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="47.071µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="868.929µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.471µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.990551ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.14µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="23.04µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="81.732µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="86.532µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="116.873µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="548.432µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.89µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.234468ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.229019ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="44.551µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="43.401µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="194.434µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="90.932µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="69.302µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=55.760874ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="192.965µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.641µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="6.241µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.204.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=105.330528ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="61.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.59052ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.505558ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="13.341µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.7µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.62µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="68.501µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="497.271µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.82µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="337.867µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.198287ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.409242ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.68µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.261µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.204 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.204 ipAddr.ipv6="" k8sNodeIP=162.253.55.204 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.204" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.3" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.204" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.204} {CiliumInternalIP 10.0.0.3}] 10.0.0.0/24 [] [] 10.0.0.108 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39553" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.804234789s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="52.651µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="82.002µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="93.842µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="72.392µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2833 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2833 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2833 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.760174558s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=306.240132ms file-path=/var/run/cilium/state/templates/bfbb789c8ac7cca4b64226b4289ee618f22f58a99d6cd7a94f8a779da5e8eaa1/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.113 17b5b41b-2cec-47fb-befb-034b1003fc61 default }" containerID=85ca4e56f9dca310fcc3ee0fd3bb86a18f9dde6b5d67000abf83468b7f1fdf79 datapathConfiguration="&{false false false false false }" interface=lxcf2bfb56735c6 k8sPodName=kube-system/coredns-7c96b6546b-mml6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85ca4e56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85ca4e56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=85ca4e56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85ca4e56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=10702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85ca4e56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=10702 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 0113deae-0909-4a35-bbb6-b44a0ae8042b default }" containerID=4d739d44e565efe53407acb31fb459030fef678408eca63c00e44e86f9082b0c datapathConfiguration="&{false false false false false }" interface=lxc7b843840ac2b k8sPodName=cert-manager/cert-manager-webhook-548949fc64-l4nnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d739d44e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.193 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-l4nnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d739d44e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.193 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-l4nnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d739d44e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=43924 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.193 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-l4nnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d739d44e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=43924 ipv4=10.0.0.193 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-l4nnt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 2baef204-bb44-4c7b-b511-866a8b368fc9 default }" containerID=2b70f6b71835d3293b0a97cc83f332a9bd2f9a10905d5380935a96e473b00d39 datapathConfiguration="&{false false false false false }" interface=lxc6e062032d16f k8sPodName=cert-manager/cert-manager-75c4c745bc-wvgkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b70f6b718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wvgkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b70f6b718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wvgkm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b70f6b718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=35711 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wvgkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b70f6b718 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=35711 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wvgkm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 8cb47688-9298-47d9-9f1b-b574c8c9165a default }" containerID=0bab13c4eee9139eef86daaf75613252430e3f4eae5b1e498d21d6e412d6bae9 datapathConfiguration="&{false false false false false }" interface=lxcf0d21fe6bec6 k8sPodName=kube-system/coredns-67659f764b-tlsll labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.197 911828b9-836a-402a-aab6-7d91c3803092 default }" containerID=43dffc23efca07bd822812d2a25e1ead454707fee6a1382beabcfd019cfa7a34 datapathConfiguration="&{false false false false false }" interface=lxc7cd9f9c40d4f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bab13c4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-tlsll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 917e5d40-4c5f-40e2-ac70-cb5953c615f4 default }" containerID=05f5989ef1d88b37c47f5756dfd34d1be5b5eafc4b0c5b57ce89a24d87c16713 datapathConfiguration="&{false false false false false }" interface=lxccf9d18ef459b k8sPodName=kube-system/coredns-67659f764b-tctkp labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.44 f3dfc506-2af4-4efa-a27f-85bc66f42b15 default }" containerID=6ff7584fd0917f2fda3fa8209c6dee53e55a503ff96153194d54d700ff11fd37 datapathConfiguration="&{false false false false false }" interface=lxc1cfe8c0144fe k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rjhzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ff7584fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rjhzr subsys=endpoint level=info msg="New endpoint" containerID=05f5989ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-67659f764b-tctkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ff7584fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rjhzr subsys=endpoint level=info msg="New endpoint" containerID=43dffc23ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=0bab13c4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-tlsll subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0bab13c4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=10702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-tlsll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bab13c4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=10702 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-tlsll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43dffc23ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05f5989ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-67659f764b-tctkp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=05f5989ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=10702 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-67659f764b-tctkp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05f5989ef1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=10702 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-67659f764b-tctkp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 6c287b10-48b1-4eb8-abb3-e3edbca54e3e default }" containerID=ab3e5ae4a22a65da4f1c58a3cc9b7e221a7ccae04f4e8d2efbe6cbc516921a96 datapathConfiguration="&{false false false false false }" interface=lxccb42df68c23e k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab3e5ae4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab3e5ae4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2833 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 ipv4=10.0.0.108 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identityLabels="reserved:health" ipv4=10.0.0.108 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=4 identityLabels="reserved:health" ipv4=10.0.0.108 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ff7584fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=43503 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rjhzr oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6ff7584fd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=43503 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rjhzr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ab3e5ae4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=43dffc23ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.08213805s file-path=/var/run/cilium/state/templates/fdefd839abef859a624c6c87ac2efbef68e80d4ae181058f52ab9100e6045bb7/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=4d739d44e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=51 identity=43924 ipv4=10.0.0.193 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-l4nnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d739d44e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=51 identity=43924 ipv4=10.0.0.193 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-l4nnt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=85ca4e56f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=400 identity=10702 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=85ca4e56f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=400 identity=10702 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0bab13c4ee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3466 identity=10702 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-tlsll subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bab13c4ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3466 identity=10702 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-tlsll subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b70f6b718 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=773 identity=35711 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wvgkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b70f6b718 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=773 identity=35711 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-wvgkm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05f5989ef1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=8 identity=10702 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-67659f764b-tctkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=05f5989ef1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=8 identity=10702 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-67659f764b-tctkp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ff7584fd0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=171 identity=43503 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rjhzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ff7584fd0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=171 identity=43503 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rjhzr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2296 identity=4 ipv4=10.0.0.108 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43dffc23ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 identity=16573 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43dffc23ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1218 identity=16573 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=43dffc23ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1218 identity=16573 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=43dffc23ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1218 identity=16573 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6pfmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ab3e5ae4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab3e5ae4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=30495 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab3e5ae4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=30495 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab3e5ae4a2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=788 identity=30495 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab3e5ae4a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=788 identity=30495 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85ca4e56f9 endpointID=400 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-mml6w subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=85ca4e56f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=400 identity=10702 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mml6w subsys=endpoint level=info msg="Delete endpoint request" containerID=ab3e5ae4a2 endpointID=788 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-fdzpd subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=bf4f720a-bc07-4eb9-a96c-f5333458ad69 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ab3e5ae4a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=788 identity=30495 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-fdzpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 ea7e3270-ff17-439e-8d3a-a655409a0659 default }" containerID=248489a826b71b3758ef9452f3ddbc546b0172e8bf2bc4ec7720afd3a97a8053 datapathConfiguration="&{false false false false false }" interface=lxc47af163a9b77 k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=248489a826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=248489a826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=248489a826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=34282 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=248489a826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=34282 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=248489a826 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1931 identity=34282 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=248489a826 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1931 identity=34282 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc subsys=daemon level=info msg="Delete endpoint request" containerID=248489a826 endpointID=1931 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-56rgc subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=97e446fe-37aa-4bb0-af20-04f7fae7175b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=248489a826 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1931 identity=34282 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-56rgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 2a20b459-d04c-4da5-9f86-770bc0a352fe default }" containerID=795d971001207fd2f413a9b2b7c3d83854485c7859339126e50919549fefb28a datapathConfiguration="&{false false false false false }" interface=lxc56775b1d4aab k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=795d971001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=795d971001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=795d971001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=795d971001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=5809 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=795d971001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=5809 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=795d971001 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3632 identity=5809 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz subsys=endpoint level=info msg="Successful endpoint creation" containerID=795d971001 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3632 identity=5809 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-p46sz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 d89b5403-4f90-4698-8968-90407bd76e3d default }" containerID=9dd40fb565806da1658e8821b5ab073f273afb8f56af71c38a130abf7073a268 datapathConfiguration="&{false false false false false }" interface=lxc84326092bc67 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dd40fb565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dd40fb565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9dd40fb565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dd40fb565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=17180 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dd40fb565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=17180 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9dd40fb565 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=309 identity=17180 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dd40fb565 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=17180 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9dd40fb565 endpointID=309 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-srqf7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=48bd7d3d-0e34-4360-a32e-dfd6434e52f4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9dd40fb565 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=17180 ipv4=10.0.0.65 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-srqf7 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=1ce32667-bee3-4a8f-add3-6708d5372955] Description:}]" policyAddRequest=ce6b2ddc-a389-4f44-b720-0929b1fa06f1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ce6b2ddc-a389-4f44-b720-0929b1fa06f1 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=51573cf7-7a34-45bf-a024-3fafe14376d5] Description:}]" policyAddRequest=ea751fae-1537-4554-a130-bc091122135a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ea751fae-1537-4554-a130-bc091122135a policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.18 e2b0df73-35d0-41df-8fa9-a53fb613232e default }" containerID=c8fd2340f123a20f5a55fbbc2dcf30cac0283665b92953056d5d56b399f9abe9 datapathConfiguration="&{false false false false false }" interface=lxc4a943f7b4eb5 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f8nqq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8fd2340f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f8nqq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8fd2340f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f8nqq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c8fd2340f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=1181 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f8nqq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8fd2340f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=1181 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f8nqq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8fd2340f1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=724 identity=1181 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f8nqq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8fd2340f1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=724 identity=1181 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f8nqq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 db3b9ae5-ee75-404c-90df-36874b61489e default }" containerID=aef9ea7a34ddd8c2044b57d8860fd565e6e92fdcacf1075bfc696c2608eea7b7 datapathConfiguration="&{false false false false false }" interface=lxc71c11d9916c2 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-tt9mx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aef9ea7a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-tt9mx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aef9ea7a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-tt9mx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aef9ea7a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identity=13474 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-tt9mx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aef9ea7a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4027 identity=13474 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-tt9mx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aef9ea7a34 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4027 identity=13474 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-tt9mx subsys=endpoint level=info msg="Successful endpoint creation" containerID=aef9ea7a34 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4027 identity=13474 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-tt9mx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.185 b8f38af1-a33c-49a8-9031-6f380fd1e711 default }" containerID=1b9fe8c5cfe557c59a1de40e524b16efe807445cae79a1a857d11af2e2cefe7a datapathConfiguration="&{false false false false false }" interface=lxc9c91cf843fe9 k8sPodName=openstack/pxc-operator-7cff949c8b-ltk2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b9fe8c5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ltk2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b9fe8c5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ltk2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b9fe8c5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=54697 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ltk2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b9fe8c5cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=54697 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ltk2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1b9fe8c5cf datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2321 identity=54697 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ltk2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b9fe8c5cf datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2321 identity=54697 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-ltk2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 19e33539-a1e6-4fb3-b105-cc1d3417552b default }" containerID=e3efcad0f21d3a7c817b483b777c8fb8076503a89b03465d458a475b75322dc0 datapathConfiguration="&{false false false false false }" interface=lxc4a2220bbdebf k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3efcad0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3efcad0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3efcad0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=8201 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e3efcad0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=8201 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 64557257-1f4e-4b4e-b5e5-9f611c0f246c default }" containerID=53432f3282c2c7ec6d65c90de5552cebf23c25fe90b5d2222a7a3e87317082dc datapathConfiguration="&{false false false false false }" interface=lxcbe5483c96580 k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53432f3282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53432f3282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53432f3282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53432f3282 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identity=58659 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3efcad0f2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=298 identity=8201 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3efcad0f2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=298 identity=8201 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=53432f3282 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1098 identity=58659 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53432f3282 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1098 identity=58659 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53432f3282 endpointID=1098 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=53432f3282 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1098 identity=58659 ipv4=10.0.0.76 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-08545545-561e-4464-9883-021ecb5cf3d9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 4c570e5e-32de-45cb-b32d-bf214ee6f383 default }" containerID=9b65b6879a117317b8337a75b6003da755b932f5789887132a18dca7c78f52d8 datapathConfiguration="&{false false false false false }" interface=lxcde9987ef17e8 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b65b6879a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b65b6879a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b65b6879a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=7738 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b65b6879a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=7738 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b65b6879a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=697 identity=7738 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b65b6879a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=697 identity=7738 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=76c1de69-a9ee-43a9-a25f-3f48bc2f831e] Description:}]" policyAddRequest=b9cb8bcb-9627-48ea-aa58-926ef2080de0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b9cb8bcb-9627-48ea-aa58-926ef2080de0 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.22 5587f059-ef91-4e86-847e-ce5b01901df0 default }" containerID=3f3237120dae03f78f84675ba26f06bef8ee709eac7491a5b9fe4a77da429493 datapathConfiguration="&{false false false false false }" interface=lxc513008cf5c94 k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f3237120d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f3237120d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f3237120d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f3237120d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=58659 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f3237120d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4025 identity=58659 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f3237120d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4025 identity=58659 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f subsys=daemon level=info msg="Delete endpoint request" containerID=3f3237120d endpointID=4025 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3f3237120d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4025 identity=58659 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bb02b742-5317-407d-8b5f-17acda20675f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 5b9b3c8b-620c-405b-a61c-1957cca38968 default }" containerID=9ee6d31f73416f75730669d53abe68ce9fee1a34b8d6bae41db0c5c515fa27bc datapathConfiguration="&{false false false false false }" interface=lxc56d358e131a0 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ee6d31f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3650 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ee6d31f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3650 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9ee6d31f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3650 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ee6d31f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3650 identity=18069 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ee6d31f73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3650 identity=18069 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ee6d31f73 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3650 identity=18069 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ee6d31f73 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3650 identity=18069 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f3de633d-6dc7-407b-941a-c01d6b6fe131] Description:}]" policyAddRequest=f1fe4ffe-ce19-4496-9227-55f615088b45 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=f1fe4ffe-ce19-4496-9227-55f615088b45 policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.89 62760da1-e66e-48e5-ae4f-c57a52cc7d97 default }" containerID=f6c9c46dcab01cd5593803dc37558665013a464d28f9e63ae22e4e43a3a7824a datapathConfiguration="&{false false false false false }" interface=lxc9b59c973ca36 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6c9c46dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6c9c46dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6c9c46dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identity=47464 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f6c9c46dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identity=47464 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6c9c46dca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2719 identity=47464 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6c9c46dca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2719 identity=47464 ipv4=10.0.0.89 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008762021994670417 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.175 a86f7c82-36a4-400a-a9d5-5a2a85fdd434 default }" containerID=0804928164d8092af286068715baff0436f6fc80b5699dd90809b4a196c2aca4 datapathConfiguration="&{false false false false false }" interface=lxc82bbb4ea1e78 k8sPodName=monitoring/node-feature-discovery-worker-lhtcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0804928164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2209 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lhtcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0804928164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2209 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lhtcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.19 ac001bed-4e40-4576-93ef-9e296ecd08e7 default }" containerID=ea59190ab46261d152baba13f681cdba2afc834ddaf7a2b912d3b51dc667980e datapathConfiguration="&{false false false false false }" interface=lxcc25e5512e4e3 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea59190ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea59190ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0804928164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2209 identity=7986 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lhtcr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0804928164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2209 identity=7986 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lhtcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=ea59190ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea59190ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 identity=17624 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea59190ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1293 identity=17624 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 4961d51c-fb55-40e5-b358-4ff44144476b default }" containerID=3f998bb5ccddf26810cfac8d54487a9ac2eafcb3d856a702168a80dc694c3aa1 datapathConfiguration="&{false false false false false }" interface=lxc350d6e4770ca k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-tjvk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f998bb5cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3286 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-tjvk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f998bb5cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3286 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-tjvk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f998bb5cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3286 identity=7675 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-tjvk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f998bb5cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3286 identity=7675 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-tjvk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0804928164 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2209 identity=7986 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lhtcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0804928164 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2209 identity=7986 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-lhtcr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea59190ab4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1293 identity=17624 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea59190ab4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1293 identity=17624 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xrt6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3f998bb5cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3286 identity=7675 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-tjvk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f998bb5cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3286 identity=7675 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-tjvk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 a64c2d5c-753a-4af6-b9f4-ab6f15ab89d1 default }" containerID=32f252effa7b78a0ed05998c6b250876c5cfb4d54ed1be90d575ad92d1b8d369 datapathConfiguration="&{false false false false false }" interface=lxcaee17a2d6668 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-th7lq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32f252effa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-th7lq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32f252effa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-th7lq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32f252effa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=26781 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-th7lq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32f252effa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=676 identity=26781 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-th7lq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=32f252effa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=676 identity=26781 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-th7lq subsys=endpoint level=info msg="Successful endpoint creation" containerID=32f252effa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=676 identity=26781 ipv4=10.0.0.134 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-th7lq subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2833 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02833 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02833 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02833 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02833:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2833 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 e8c19822-23fc-4a36-8f29-8e3f7ac38bfe default }" containerID=e7d548dcdbff3bcbb9f28fe1b24caab47b506d82f8cc5b320827cc2ef9f4b73a datapathConfiguration="&{false false false false false }" interface=lxcfdd1cbde090d k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d548dcdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d548dcdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e7d548dcdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e7d548dcdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=5909 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d548dcdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=5909 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d548dcdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=872 identity=5909 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d548dcdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=872 identity=5909 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7d548dcdb endpointID=872 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-bhtzl subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=96a966b9-9556-4f71-814a-5f61e43bdac3 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e7d548dcdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=872 identity=5909 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bhtzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 9fe2f616-17da-43a1-83cf-5c6913ecd2a0 default }" containerID=1e721e46a6aad86c84b1007a163252dca9bf3356dedfe55cbd8fcc3c13d6f854 datapathConfiguration="&{false false false false false }" interface=lxcd229d0a6a2b9 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e721e46a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e721e46a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1e721e46a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e721e46a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 identity=24565 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e721e46a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 identity=24565 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 1d2c692d-1205-44be-8e97-5cf391d7a531 default }" containerID=5009142c0d2b3f2bc4c7fa4390c6cffaebbdd51dc7aa3398199b3868adc704ed datapathConfiguration="&{false false false false false }" interface=lxc377feb5aa277 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kchm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5009142c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kchm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5009142c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kchm6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.86 d0e26c7a-0a47-47e2-a770-e5a904bc5610 default }" containerID=9ac8847e70348f9270a21131caf785fe7394e9a05332f0dd38af018f3c385ea6 datapathConfiguration="&{false false false false false }" interface=lxcc82281161ad8 k8sPodName=monitoring/kube-prometheus-stack-grafana-76cf4886c9-56szf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ac8847e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76cf4886c9-56szf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ac8847e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76cf4886c9-56szf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5009142c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=29752 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kchm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5009142c0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=29752 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kchm6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ac8847e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=43428 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76cf4886c9-56szf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ac8847e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=43428 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76cf4886c9-56szf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e721e46a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2761 identity=24565 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e721e46a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2761 identity=24565 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xwpng subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5009142c0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=939 identity=29752 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kchm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5009142c0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=939 identity=29752 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kchm6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9ac8847e70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=43428 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76cf4886c9-56szf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ac8847e70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=43428 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76cf4886c9-56szf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 cb39c271-6d04-4001-9877-3cff33e40457 default }" containerID=e04af912f8d24df2be4b8f768d4361ab37f0811e2b59a2a09483562ba6fb8c02 datapathConfiguration="&{false false false false false }" interface=lxca37b5f197274 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e04af912f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e04af912f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e04af912f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=18450 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e04af912f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2139 identity=18450 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e04af912f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2139 identity=18450 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e04af912f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=18450 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e04af912f8 endpointID=2139 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xrpw8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b5134179-6658-4cc0-b5c5-bf7fe3060be2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e04af912f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2139 identity=18450 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xrpw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 6410f1ad-0c18-4373-bb10-dd5d8800851a default }" containerID=8b78fb988895f54df26de2f6d0aec4a4767160b6fa121c752235dc096a817843 datapathConfiguration="&{false false false false false }" interface=lxca56e18cc2edf k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b78fb9888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b78fb9888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b78fb9888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b78fb9888 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=58659 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b78fb9888 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3564 identity=58659 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b78fb9888 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3564 identity=58659 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 e9e763c6-5ccc-478e-9721-8920b89914ea default }" containerID=d4cffde400aaa70e56a62793895bc19a288b5ef4c48cc841be1798c08890d1d8 datapathConfiguration="&{false false false false false }" interface=lxc85abb8bfc643 k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4cffde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4cffde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d4cffde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4cffde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=58659 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4cffde400 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1284 identity=58659 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4cffde400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=58659 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 subsys=daemon level=info msg="Delete endpoint request" containerID=d4cffde400 endpointID=1284 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=8b78fb9888 endpointID=3564 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d4cffde400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=58659 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5b33aef6-ae48-4d66-93b1-cdc7fb246878 subsys=endpoint level=info msg="Removed endpoint" containerID=8b78fb9888 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3564 identity=58659 ipv4=10.0.0.74 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-856971ad-551f-40a8-9aa5-d9878b0c4c8e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 1f306729-b924-4fd8-b20d-f7356292df49 default }" containerID=e749f9e89fdd3704903237486c0f9aa6a4bf47d6bd90b67d2fa792020741febe datapathConfiguration="&{false false false false false }" interface=lxc8c743aa3fc70 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e749f9e89f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3061 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e749f9e89f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3061 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e749f9e89f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3061 identity=19278 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e749f9e89f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3061 identity=19278 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 7d7f5e1d-ac7d-4a03-b03c-a472ba4dc34e default }" containerID=490c32a463d225c876962cf3a66ce8ad4aa106c93d0bd5378cbdd89c8e5d843c datapathConfiguration="&{false false false false false }" interface=lxcff61f3cb6c62 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=490c32a463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=490c32a463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=490c32a463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=5338 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=490c32a463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=5338 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e749f9e89f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3061 identity=19278 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e749f9e89f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3061 identity=19278 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=490c32a463 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1170 identity=5338 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=490c32a463 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1170 identity=5338 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 26c0d7ec-f50a-4d25-944b-b34bed28d345 default }" containerID=8ead58d50b658b7de8137935681dc99ffbb2c2245d1e8894749caed34daef7f7 datapathConfiguration="&{false false false false false }" interface=lxcbbf6fb8d70e8 k8sPodName=monitoring/loki-gateway-cf54cb88c-9c5cq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ead58d50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9c5cq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ead58d50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9c5cq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.162 c4542d3f-9fab-4b8e-8a9f-80ffb4c49c56 default }" containerID=f6856197b09009910f9bf85ce8cfc9d77bb367e36c0c2542b9cef162d8731a8d datapathConfiguration="&{false false false false false }" interface=lxcbd7a7658346b k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6856197b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6856197b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ead58d50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=33742 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9c5cq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ead58d50b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=33742 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9c5cq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6856197b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=62124 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6856197b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=62124 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 ed27c2d3-c3dd-4317-aa7c-15635ebbcaf5 default }" containerID=bffecb4ab6d1b582ad5b516ee2f4bf60aa0c817c32df9c8cffd8dcecccc81377 datapathConfiguration="&{false false false false false }" interface=lxcff2a43783c1d k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bffecb4ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bffecb4ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bffecb4ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bffecb4ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=58659 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 d87bfc62-3b2a-461e-b126-efbbef6286a7 default }" containerID=7ff1d034ce4b3bf2026ed4d8ac4c35396b0cb046a864058376b7aa9e5d71a133 datapathConfiguration="&{false false false false false }" interface=lxce72b7d531dfc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ff1d034ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ff1d034ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=f6856197b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1390 identity=62124 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6856197b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=62124 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8ead58d50b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=33742 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9c5cq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ead58d50b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=33742 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-9c5cq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bffecb4ab6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3980 identity=58659 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bffecb4ab6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3980 identity=58659 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ff1d034ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identity=10564 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ff1d034ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3579 identity=10564 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ff1d034ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3579 identity=10564 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ff1d034ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3579 identity=10564 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 371be9d0-4e48-4026-87f4-2d854e90be6d default }" containerID=8fdc56ac2131106885a0783d24b47c2931eb7db04bae335e47d6c7710d470b05 datapathConfiguration="&{false false false false false }" interface=lxcf6f04ab2e917 k8sPodName=monitoring/vector-sqj9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fdc56ac21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-sqj9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fdc56ac21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-sqj9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fdc56ac21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=23343 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-sqj9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fdc56ac21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=23343 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-sqj9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fdc56ac21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=906 identity=23343 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-sqj9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fdc56ac21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=906 identity=23343 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-sqj9h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bffecb4ab6 endpointID=3980 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bffecb4ab6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3980 identity=58659 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ccdea4b1-2ee1-4633-9c20-128822b39bf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 87fdc86b-8e40-4526-a2d2-54f081cea639 default }" containerID=fa78b05309ef7ac427a49e8bf0c07474cea2e551e9b5ecefb44ea95b0d09645b datapathConfiguration="&{false false false false false }" interface=lxc6dd7a0059e8d k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa78b05309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa78b05309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=fa78b05309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fa78b05309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=58814 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa78b05309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=58814 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa78b05309 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2545 identity=58814 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa78b05309 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=58814 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.74 38f9f7c5-d178-4ed2-82be-d21af21802ba default }" containerID=e7bc8bc9b85b1f5e3d4b2ababbfedfb93012b90434cc1f39bf9cace661228a2b datapathConfiguration="&{false false false false false }" interface=lxc04286bce487b k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-f8xsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7bc8bc9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-f8xsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7bc8bc9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-f8xsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7bc8bc9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=30550 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-f8xsm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e7bc8bc9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3388 identity=30550 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-f8xsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7bc8bc9b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3388 identity=30550 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-f8xsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7bc8bc9b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3388 identity=30550 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-f8xsm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 9327d348-d206-4c1d-a969-c1fe11b86262 default }" containerID=a3965270af7c5cd495aab3a2a1588e93843c9ff619a9ee2edd1326b522926f45 datapathConfiguration="&{false false false false false }" interface=lxc96530841ca07 k8sPodName=openstack/memcached-memcached-6479589586-2vtjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3965270af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2vtjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3965270af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2vtjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3965270af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 identity=44878 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2vtjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3965270af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 identity=44878 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2vtjf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a3965270af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1165 identity=44878 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2vtjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3965270af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1165 identity=44878 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2vtjf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 eadcdd1c-0f3a-4817-b225-c3b089b2c716 default }" containerID=478f9c0dd36b78436ca5acbf0880a68fb3d44bbad69777aa8351cdd6e064d33e datapathConfiguration="&{false false false false false }" interface=lxcef16a3be42dc k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=478f9c0dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=478f9c0dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=478f9c0dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=478f9c0dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1412 identity=58659 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=478f9c0dd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1412 identity=58659 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=478f9c0dd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1412 identity=58659 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf subsys=daemon level=info msg="Delete endpoint request" containerID=478f9c0dd3 endpointID=1412 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=478f9c0dd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1412 identity=58659 ipv4=10.0.0.102 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-26dd31e5-c8a9-4d0d-bf48-f1b95fca40cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 62b18977-f562-4f1c-bc3d-e64684842397 default }" containerID=e8d3b03d6d9a77f4851278852a2dc8326a57b8a13aedd9d1e4242cd569e10704 datapathConfiguration="&{false false false false false }" interface=lxcfca56a248b49 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8d3b03d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8d3b03d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8d3b03d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identity=55958 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e8d3b03d6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identity=55958 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8d3b03d6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3267 identity=55958 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8d3b03d6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3267 identity=55958 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 44d1787b-7437-4b71-aac9-282c2414fc3c default }" containerID=f8eb99765bc626eb79e0bc728055f49668fd33c5a50ef7e6ccf32ee0bb9d293b datapathConfiguration="&{false false false false false }" interface=lxc3f85d600cd42 k8sPodName=openstack/keystone-api-7c4957db67-2zllg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8eb99765b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-7c4957db67-2zllg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8eb99765b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-7c4957db67-2zllg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8eb99765b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=65210 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-7c4957db67-2zllg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8eb99765b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=65210 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-7c4957db67-2zllg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f8eb99765b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1856 identity=65210 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-7c4957db67-2zllg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8eb99765b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=65210 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-7c4957db67-2zllg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 77d869b5-aa62-4dfe-9dd3-bd1e6575dbdc default }" containerID=8e43e3db0b8bee161cb845167febce023b273a4ed97b90a16b27fcd72dc997ce datapathConfiguration="&{false false false false false }" interface=lxc2d70c6321330 k8sPodName=openstack/keystone-credential-setup-slv8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e43e3db0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-credential-setup-slv8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e43e3db0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-credential-setup-slv8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e43e3db0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=26282 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-credential-setup-slv8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e43e3db0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=26282 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-credential-setup-slv8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e43e3db0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1379 identity=26282 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-credential-setup-slv8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e43e3db0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=26282 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-credential-setup-slv8h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e43e3db0b endpointID=1379 k8sNamespace=openstack k8sPodName=keystone-credential-setup-slv8h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=91b16890-a4a3-4287-9461-78c43ee083cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8e43e3db0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1379 identity=26282 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-credential-setup-slv8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 e4e8398a-9ac0-4ed4-bef1-22e23ca3788f default }" containerID=b93c51172f62eba46281aedbfa58d92d31cd9c8d15c63e19941591dbca20d406 datapathConfiguration="&{false false false false false }" interface=lxc2056e399d3fc k8sPodName=openstack/keystone-db-init-vdz8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b93c51172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-vdz8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b93c51172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-vdz8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b93c51172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=34762 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-vdz8b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b93c51172f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=610 identity=34762 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-vdz8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b93c51172f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=610 identity=34762 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-vdz8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b93c51172f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=610 identity=34762 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-vdz8b subsys=daemon level=info msg="Delete endpoint request" containerID=b93c51172f endpointID=610 k8sNamespace=openstack k8sPodName=keystone-db-init-vdz8b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=146f1e55-31fc-4b42-bf2a-703cc515d4cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b93c51172f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=610 identity=34762 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-init-vdz8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 38779dff-6a3e-4562-9453-8c7b333a287d default }" containerID=093b0f0cf8ab012ca78b88a8d85d10d556ae98c91f77ee952250d100995dad7a datapathConfiguration="&{false false false false false }" interface=lxc5167bd98caea k8sPodName=openstack/keystone-fernet-setup-562d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=093b0f0cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-562d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=093b0f0cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d2e150b-0780-4aac-87e5-9000389487db,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5d2e150b-0780-4aac-87e5-9000389487db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-562d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5d2e150b-0780-4aac-87e5-9000389487db;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5d2e150b-0780-4aac-87e5-9000389487db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=093b0f0cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=7449 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d2e150b-0780-4aac-87e5-9000389487db,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5d2e150b-0780-4aac-87e5-9000389487db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-562d5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=093b0f0cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=7449 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-562d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=093b0f0cf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1502 identity=7449 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-562d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=093b0f0cf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=7449 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-562d5 subsys=daemon level=info msg="Delete endpoint request" containerID=093b0f0cf8 endpointID=1502 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-562d5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5d2e150b-0780-4aac-87e5-9000389487db k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5d2e150b-0780-4aac-87e5-9000389487db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=093b0f0cf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1502 identity=7449 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-fernet-setup-562d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 515b07af-fe03-4cd3-ad56-5370bdb398df default }" containerID=f718c903d55246b60829311933087bea4fd5c34b7b1bef5c9f7a81c7e6ffd229 datapathConfiguration="&{false false false false false }" interface=lxc296cfb2b336a k8sPodName=openstack/keystone-db-sync-qqsll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f718c903d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-sync-qqsll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f718c903d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-sync-qqsll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f718c903d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=10583 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-sync-qqsll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f718c903d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=10583 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-sync-qqsll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f718c903d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=529 identity=10583 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-sync-qqsll subsys=endpoint level=info msg="Successful endpoint creation" containerID=f718c903d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=529 identity=10583 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-sync-qqsll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f718c903d5 endpointID=529 k8sNamespace=openstack k8sPodName=keystone-db-sync-qqsll subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=da5054b1-a351-4296-9245-a2eb06bbecdb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f718c903d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=529 identity=10583 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-db-sync-qqsll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 cf0b3942-aeff-4408-a5d4-09d80681ef0e default }" containerID=67a37ae6b39b8720113f43ee84149ce8087781e51f4f617a01a4c6e8ec99784f datapathConfiguration="&{false false false false false }" interface=lxcef17077520ef k8sPodName=openstack/keystone-rabbit-init-j98wk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67a37ae6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3193 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-rabbit-init-j98wk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67a37ae6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3193 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-rabbit-init-j98wk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67a37ae6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3193 identity=6883 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-rabbit-init-j98wk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67a37ae6b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3193 identity=6883 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-rabbit-init-j98wk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=67a37ae6b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3193 identity=6883 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-rabbit-init-j98wk subsys=endpoint level=info msg="Successful endpoint creation" containerID=67a37ae6b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3193 identity=6883 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-rabbit-init-j98wk subsys=daemon level=info msg="Delete endpoint request" containerID=67a37ae6b3 endpointID=3193 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-j98wk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4817d967-6135-41a8-9a3c-50dc0f545ba3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=67a37ae6b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3193 identity=6883 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-rabbit-init-j98wk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 3d5c838a-7b02-436c-91c8-cd599a9d6e5c default }" containerID=44fc36701f15efccfe03ebfa5e5bb0b9e97052b451b5d7612385f34fc46a54cf datapathConfiguration="&{false false false false false }" interface=lxc5ac43dbdce68 k8sPodName=openstack/keystone-domain-manage-nd9z7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44fc36701f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-nd9z7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44fc36701f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-nd9z7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44fc36701f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 identity=5089 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-nd9z7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44fc36701f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2026 identity=5089 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-nd9z7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=44fc36701f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2026 identity=5089 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-nd9z7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44fc36701f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2026 identity=5089 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-nd9z7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44fc36701f endpointID=2026 k8sNamespace=openstack k8sPodName=keystone-domain-manage-nd9z7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=daf98fe1-e89e-444e-a3d9-8d528834e6ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=44fc36701f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2026 identity=5089 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-domain-manage-nd9z7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 43662090-881c-44ed-ae1d-2db92b7c63ad default }" containerID=04eb22a11ce58c360a7ace00a43de86f288663a754696fbae94b4f3f0173792d datapathConfiguration="&{false false false false false }" interface=lxc601cb3beae8d k8sPodName=openstack/keystone-bootstrap-nx4pv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04eb22a11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04eb22a11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=04eb22a11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04eb22a11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=12255 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04eb22a11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=12255 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04eb22a11c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1931 identity=12255 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv subsys=endpoint level=info msg="Successful endpoint creation" containerID=04eb22a11c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1931 identity=12255 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03427029366807797 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04eb22a11c endpointID=1931 k8sNamespace=openstack k8sPodName=keystone-bootstrap-nx4pv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b53f2479-5f35-4161-bf80-2a56cc4ad48d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=04eb22a11c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1931 identity=12255 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-bootstrap-nx4pv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 31961bfc-df5b-474d-babd-9b2ebd33c49c default }" containerID=35536813a2ada19727ae91ddb330049eb14f5733f9a37659613632ddfc2c26d9 datapathConfiguration="&{false false false false false }" interface=lxc97c2896ae2e9 k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35536813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35536813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35536813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35536813a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=58659 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35536813a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2292 identity=58659 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=35536813a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2292 identity=58659 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c subsys=daemon level=info msg="Delete endpoint request" containerID=35536813a2 endpointID=2292 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=35536813a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2292 identity=58659 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b72e637-c49c-4506-8b37-b0e4bf867a9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 7e38bd04-b27b-4fc6-8e6a-9cf472f93948 default }" containerID=b82a5447616e4512c2562f16143486df604e3981ca4e93ea4838e745794b535a datapathConfiguration="&{false false false false false }" interface=lxcb1da685dabbf k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b82a544761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b82a544761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b82a544761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identity=63345 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b82a544761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identity=63345 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b82a544761 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3626 identity=63345 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b82a544761 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3626 identity=63345 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 4345cd0c-6ec3-4fa9-90e4-2b0dd2d143f8 default }" containerID=25514b62673bf34515e4ce839b0af0b43be807e8214fdf43de070a34c15397c3 datapathConfiguration="&{false false false false false }" interface=lxc774f40bf46f1 k8sPodName=openstack/barbican-api-849c447dc5-lzwk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25514b6267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-849c447dc5-lzwk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25514b6267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-849c447dc5-lzwk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25514b6267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identity=23904 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-849c447dc5-lzwk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25514b6267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identity=23904 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-849c447dc5-lzwk2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 bb0631a6-d1f9-4445-81f1-69ad32a81681 default }" containerID=f7a5c961c8434d18f646517934a1bab41dcf4a82823d1e99fbe2b9b309ea5aad datapathConfiguration="&{false false false false false }" interface=lxcbb321d24c855 k8sPodName=openstack/barbican-db-init-jl4f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7a5c961c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-jl4f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7a5c961c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-jl4f8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7a5c961c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=27419 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-jl4f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7a5c961c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=27419 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-jl4f8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25514b6267 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3713 identity=23904 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-849c447dc5-lzwk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25514b6267 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3713 identity=23904 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/barbican-api-849c447dc5-lzwk2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f7a5c961c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2570 identity=27419 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-jl4f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7a5c961c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=27419 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-jl4f8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7a5c961c8 endpointID=2570 k8sNamespace=openstack k8sPodName=barbican-db-init-jl4f8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=8e079b69-c1cc-488f-ab8f-b61c81d5a9d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f7a5c961c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=27419 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-db-init-jl4f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 ec0b8ca8-fced-4df2-93cc-fca3373f0bd4 default }" containerID=05578a3f7b079713067012ba3551f25ff6180af24ddc851b6b24af7f0193cf3e datapathConfiguration="&{false false false false false }" interface=lxcdfb8f3459149 k8sPodName=openstack/barbican-db-sync-n4whx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05578a3f7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05578a3f7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=05578a3f7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05578a3f7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=56410 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05578a3f7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=56410 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05578a3f7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=330 identity=56410 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx subsys=endpoint level=info msg="Successful endpoint creation" containerID=05578a3f7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=330 identity=56410 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=05578a3f7b endpointID=330 k8sNamespace=openstack k8sPodName=barbican-db-sync-n4whx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=04b1368c-5dd4-4140-9818-28b60a8cf552 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=05578a3f7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=330 identity=56410 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-db-sync-n4whx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 65179afa-26d4-45e7-a32f-b9f301ef10d2 default }" containerID=6272c815c081697d2d14ffe202bf14d3a4690ef1507aeb0e540de7622075303e datapathConfiguration="&{false false false false false }" interface=lxcc7e26f581043 k8sPodName=openstack/barbican-rabbit-init-7ss7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6272c815c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6272c815c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6272c815c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6272c815c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=55778 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6272c815c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=55778 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6272c815c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=6 identity=55778 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6272c815c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=6 identity=55778 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6272c815c0 endpointID=6 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-7ss7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8aa20220-9a70-4da8-8edb-11bba3c72150 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6272c815c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=6 identity=55778 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-7ss7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 d5a42730-b660-4ccf-b491-ca7e3fc15bf4 default }" containerID=1e4d13d7553b60784304f3ca2a11e7e36aeee6d9b4b134f2b0f6d8fc571fa426 datapathConfiguration="&{false false false false false }" interface=lxc7ecc3fe955bc k8sPodName=openstack/barbican-ks-service-nc4xw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e4d13d755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-service-nc4xw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e4d13d755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-service-nc4xw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e4d13d755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 identity=7414 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-service-nc4xw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e4d13d755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3577 identity=7414 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-service-nc4xw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e4d13d755 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3577 identity=7414 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-service-nc4xw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e4d13d755 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3577 identity=7414 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-service-nc4xw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e4d13d755 endpointID=3577 k8sNamespace=openstack k8sPodName=barbican-ks-service-nc4xw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=f772c3d6-adad-46ea-8ae1-f46af2f84e45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1e4d13d755 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3577 identity=7414 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-service-nc4xw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 5340d8c1-9067-40c4-a4e8-276188166d54 default }" containerID=f99b17ea113b0b3bcbc73b54128cd2284f10c030836dda1d037cc6b173f491a4 datapathConfiguration="&{false false false false false }" interface=lxc22761ed0e265 k8sPodName=openstack/barbican-ks-endpoints-sfjzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f99b17ea11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sfjzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f99b17ea11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85a22492-72ff-47e3-85c8-7957dec20756,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=85a22492-72ff-47e3-85c8-7957dec20756,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sfjzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=85a22492-72ff-47e3-85c8-7957dec20756;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=85a22492-72ff-47e3-85c8-7957dec20756;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f99b17ea11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=31182 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85a22492-72ff-47e3-85c8-7957dec20756,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=85a22492-72ff-47e3-85c8-7957dec20756,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sfjzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f99b17ea11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=31182 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sfjzf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f99b17ea11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=541 identity=31182 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sfjzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f99b17ea11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=541 identity=31182 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sfjzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f99b17ea11 endpointID=541 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-sfjzf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=85a22492-72ff-47e3-85c8-7957dec20756 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=85a22492-72ff-47e3-85c8-7957dec20756 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f99b17ea11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=541 identity=31182 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-sfjzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 98ed814b-ce3c-4646-8f0d-11a13bccb7a9 default }" containerID=c3f5d6e754be6792e9a4932dbfb45c1269de3dd129b748606c9968a29b227b97 datapathConfiguration="&{false false false false false }" interface=lxc17ffab59757b k8sPodName=openstack/barbican-ks-user-w8xw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3f5d6e754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3f5d6e754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c3f5d6e754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3f5d6e754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=43770 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3f5d6e754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=43770 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3f5d6e754 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=9 identity=43770 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3f5d6e754 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=43770 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3f5d6e754 endpointID=9 k8sNamespace=openstack k8sPodName=barbican-ks-user-w8xw6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=d0b28c0a-f2f9-479c-b5a7-f14b6c5c4fd9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c3f5d6e754 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=43770 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/barbican-ks-user-w8xw6 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.76 5fc23219-2397-4e34-aa3a-bff4fbe25b54 default }" containerID=e12e74d585802e3760b6a79eefcde2884a9e03e078a77facb44ec517f1bc422f datapathConfiguration="&{false false false false false }" interface=lxc55b550ca1809 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fb7dl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e12e74d585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 ipv4=10.0.0.76 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fb7dl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e12e74d585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.76 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fb7dl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e12e74d585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=37851 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.76 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fb7dl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e12e74d585 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=37851 ipv4=10.0.0.76 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fb7dl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e12e74d585 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=529 identity=37851 ipv4=10.0.0.76 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fb7dl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e12e74d585 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=529 identity=37851 ipv4=10.0.0.76 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fb7dl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 b5ceb544-349d-48fe-b815-b5c293d608a5 default }" containerID=81e49450c346e48a4152eacfb6377698d7946e48086b36dac5621eac8cf9084c datapathConfiguration="&{false false false false false }" interface=lxc3562fe2057d6 k8sPodName=openstack/rook-ceph-detect-version-hpw45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81e49450c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81e49450c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81e49450c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81e49450c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=64341 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81e49450c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3749 identity=64341 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81e49450c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3749 identity=64341 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81e49450c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3749 identity=64341 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81e49450c3 endpointID=3749 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-hpw45 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c1dcea60-214c-436e-be56-42bbf04f8731 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=81e49450c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3749 identity=64341 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rook-ceph-detect-version-hpw45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 91255e62-c6e2-4337-b1de-a8e6a3767301 default }" containerID=507e63eece9cc8dc198443e229de41b2d38317a5eacf465ef0f2b6b6fdbf490a datapathConfiguration="&{false false false false false }" interface=lxca410a6c57b0c k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=507e63eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=507e63eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=507e63eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=58659 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=507e63eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=58659 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=507e63eece datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1696 identity=58659 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=507e63eece datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1696 identity=58659 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 subsys=daemon level=info msg="Delete endpoint request" containerID=507e63eece endpointID=1696 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=507e63eece datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1696 identity=58659 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-96c72ef5-4ec2-401e-a205-04df964b45f4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 db52e465-62b1-43f3-955b-7f127adcd018 default }" containerID=e5d02e45c24992f8f830232f1b0af2549c23c2019830fb37db57f80c943eff86 datapathConfiguration="&{false false false false false }" interface=lxc2bab72aab097 k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5d02e45c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5d02e45c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e5d02e45c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5d02e45c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=60794 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5d02e45c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=60794 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5d02e45c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=34 identity=60794 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5d02e45c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=34 identity=60794 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.97 89710639-fd80-4635-af6c-973551ec76d3 default }" containerID=ee4d0e5c5d914797734148fbd9fc4b50ab80d7807137a9dbc2064d90005ea40c datapathConfiguration="&{false false false false false }" interface=lxca79b05a05d54 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee4d0e5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee4d0e5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee4d0e5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=36361 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee4d0e5c5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=36361 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee4d0e5c5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1859 identity=36361 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee4d0e5c5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1859 identity=36361 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5d02e45c2 endpointID=34 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-5vv9n subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=69697a84-bb79-4da7-a10c-b83a0c56fa7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e5d02e45c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=34 identity=60794 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5vv9n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 2d09bb0a-7964-4a18-9e2d-c54a64f78c07 default }" containerID=d5cb78bdf7a601b61d7b0fb113438288c8eaa07d9e3847a08f7445c3f8e91c47 datapathConfiguration="&{false false false false false }" interface=lxca80c4c206ccc k8sPodName=openstack/glance-db-init-frl28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5cb78bdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-frl28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5cb78bdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-frl28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5cb78bdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 identity=9171 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-frl28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5cb78bdf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3245 identity=9171 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-frl28 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d5cb78bdf7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3245 identity=9171 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-frl28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5cb78bdf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3245 identity=9171 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-frl28 subsys=daemon level=info msg="Delete endpoint request" containerID=d5cb78bdf7 endpointID=3245 k8sNamespace=openstack k8sPodName=glance-db-init-frl28 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a0c7962c-010a-4f79-aa74-f8779f140f44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d5cb78bdf7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3245 identity=9171 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-frl28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 a9673991-9450-43e9-8c8a-0b74054f7f10 default }" containerID=c4a4448f694e8a19ad85c19f7ae6e5d060d797f5571f1419994a66ef5e1f0de1 datapathConfiguration="&{false false false false false }" interface=lxc9c6866f83104 k8sPodName=openstack/glance-db-sync-g5d64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4a4448f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-sync-g5d64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4a4448f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-sync-g5d64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4a4448f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=33992 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-sync-g5d64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4a4448f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=495 identity=33992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-sync-g5d64 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4a4448f69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=495 identity=33992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-sync-g5d64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4a4448f69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=495 identity=33992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-sync-g5d64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 5c7625cc-6602-4811-9d3d-e3605ac7c5e9 default }" containerID=eda996df400c9b12d2706a134b1b3f19fd2f93d2ab213fb9ffa9edc86b405fed datapathConfiguration="&{false false false false false }" interface=lxc9eb755fbb668 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pwjgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eda996df40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pwjgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eda996df40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pwjgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eda996df40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=52018 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pwjgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eda996df40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=890 identity=52018 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pwjgw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 db320cab-9a54-4977-b5f5-aabeb7934286 default }" containerID=7f8e36010cfb919a41164eb21eff38f5b3b206938ddc432cd3067edc88ccbbb8 datapathConfiguration="&{false false false false false }" interface=lxce8d30d94bf88 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5fdld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f8e36010c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5fdld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f8e36010c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5fdld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f8e36010c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=7004 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5fdld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f8e36010c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3342 identity=7004 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5fdld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eda996df40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=890 identity=52018 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pwjgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=eda996df40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=890 identity=52018 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-pwjgw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7f8e36010c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3342 identity=7004 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5fdld subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f8e36010c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3342 identity=7004 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5fdld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4a4448f69 endpointID=495 k8sNamespace=openstack k8sPodName=glance-db-sync-g5d64 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=f6582aee-2666-4640-86f1-dbecc4d4704b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c4a4448f69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=495 identity=33992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-db-sync-g5d64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 cb68825c-7041-415f-b170-ee977a1ce1e3 default }" containerID=dda96e6d05ac5adba80eeaee4a79613d840e9b54ab0e4f38d51f393b6b720bf4 datapathConfiguration="&{false false false false false }" interface=lxc7ca18e77e414 k8sPodName=openstack/glance-rabbit-init-gwxdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dda96e6d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dda96e6d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dda96e6d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dda96e6d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=23549 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dda96e6d05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=23549 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dda96e6d05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1213 identity=23549 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=dda96e6d05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1213 identity=23549 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dda96e6d05 endpointID=1213 k8sNamespace=openstack k8sPodName=glance-rabbit-init-gwxdt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b8a356a1-9dad-44df-825e-bb26950abd73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dda96e6d05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1213 identity=23549 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-rabbit-init-gwxdt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 05b13460-c089-4952-b3fb-5c672a57a2d6 default }" containerID=86636dfd9ac34b1d6624123b7d3c84efea410c31f656b0864b6caa6aa82bc809 datapathConfiguration="&{false false false false false }" interface=lxcf9d5fcd28f86 k8sPodName=openstack/glance-ks-service-6dz67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86636dfd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-service-6dz67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86636dfd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-service-6dz67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86636dfd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 identity=51927 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-service-6dz67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86636dfd9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3077 identity=51927 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-service-6dz67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86636dfd9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3077 identity=51927 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-service-6dz67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=86636dfd9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3077 identity=51927 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-service-6dz67 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=86636dfd9a endpointID=3077 k8sNamespace=openstack k8sPodName=glance-ks-service-6dz67 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=95667c20-862a-4636-b8c5-f7c80b9130f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=86636dfd9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3077 identity=51927 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-ks-service-6dz67 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 8f1241e8-65e5-4fc4-aab6-f9944dd60989 default }" containerID=15ebd97320b8169280190a117e67e1324037c66ea627d94a214c5f5d60c22308 datapathConfiguration="&{false false false false false }" interface=lxcc377942c4da5 k8sPodName=openstack/glance-ks-endpoints-z6qjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15ebd97320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15ebd97320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15ebd97320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15ebd97320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 identity=55086 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15ebd97320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3316 identity=55086 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15ebd97320 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3316 identity=55086 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=15ebd97320 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3316 identity=55086 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15ebd97320 endpointID=3316 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-z6qjk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1d5325af-6397-4f17-aabb-32c6b8d23fef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=15ebd97320 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3316 identity=55086 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-endpoints-z6qjk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 a2be9f68-0b60-44c8-9b98-e9a654d34e57 default }" containerID=0db08f1046525ec2160b4e89fad6dc346066c124aab12c61b4d4bea9714e0aef datapathConfiguration="&{false false false false false }" interface=lxcd7bd8afe2273 k8sPodName=openstack/glance-ks-user-nnr5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0db08f1046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-nnr5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0db08f1046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-nnr5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0db08f1046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 identity=23056 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-nnr5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0db08f1046 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1972 identity=23056 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-nnr5h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0db08f1046 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1972 identity=23056 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-nnr5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=0db08f1046 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1972 identity=23056 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-nnr5h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0db08f1046 endpointID=1972 k8sNamespace=openstack k8sPodName=glance-ks-user-nnr5h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3dc079ab-edd1-4ac6-b01b-8e943a5e083e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0db08f1046 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1972 identity=23056 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-ks-user-nnr5h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 d325e575-4227-4618-ac8a-de05e010be4b default }" containerID=789fce63e5bfcf835d5e2e329e1a88c9fde8932e7297604707637247b86446b1 datapathConfiguration="&{false false false false false }" interface=lxc49d1323dca92 k8sPodName=openstack/glance-metadefs-load-lj7vl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=789fce63e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-metadefs-load-lj7vl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=789fce63e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-metadefs-load-lj7vl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=789fce63e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 identity=4768 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-metadefs-load-lj7vl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=789fce63e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2179 identity=4768 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-metadefs-load-lj7vl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=789fce63e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2179 identity=4768 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-metadefs-load-lj7vl subsys=endpoint level=info msg="Successful endpoint creation" containerID=789fce63e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2179 identity=4768 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-metadefs-load-lj7vl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=789fce63e5 endpointID=2179 k8sNamespace=openstack k8sPodName=glance-metadefs-load-lj7vl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=09a70386-a350-4836-9efd-fe1c8b1ea828 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=789fce63e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2179 identity=4768 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-metadefs-load-lj7vl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 93a5c1e2-17be-4e29-a340-a5e7de7b48aa default }" containerID=5bf836798639acebf71f9018cc34bfb016969b89cfdce343e282292161cec409 datapathConfiguration="&{false false false false false }" interface=lxc7aaf4cb09ade k8sPodName=openstack/glance-storage-init-wpf4l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bf8367986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-wpf4l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bf8367986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-wpf4l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bf8367986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=29769 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-wpf4l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5bf8367986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=29769 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-wpf4l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bf8367986 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3158 identity=29769 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-wpf4l subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bf8367986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3158 identity=29769 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-wpf4l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5bf8367986 endpointID=3158 k8sNamespace=openstack k8sPodName=glance-storage-init-wpf4l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=1c414131-e1ca-48c9-8624-a2ff36e07444 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5bf8367986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3158 identity=29769 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-wpf4l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 d832dead-1314-45d4-a38f-6111784a1741 default }" containerID=a2d13981936d558c5cb101f47fced3e840b38d1cd2ce1a8c5f52a4acc6422f38 datapathConfiguration="&{false false false false false }" interface=lxc3fbb9bc7130f k8sPodName=openstack/glance-api-d58994c84-bhjl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2d1398193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-d58994c84-bhjl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2d1398193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-d58994c84-bhjl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2d1398193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identity=22913 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-d58994c84-bhjl6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2d1398193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3064 identity=22913 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-d58994c84-bhjl6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a2d1398193 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3064 identity=22913 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-d58994c84-bhjl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2d1398193 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3064 identity=22913 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-api-d58994c84-bhjl6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 69c1d4a8-6c5c-4d0c-a0a7-6e567a1bc06a default }" containerID=ddc9a5ce2a260f2823243b4bba5df1de6541a5695a7d92c066c8f7c37f5fc530 datapathConfiguration="&{false false false false false }" interface=lxc0940ec2526f1 k8sPodName=openstack/staffeln-conductor-ffcd5698d-zt8tm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddc9a5ce2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-ffcd5698d-zt8tm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddc9a5ce2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-ffcd5698d-zt8tm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddc9a5ce2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=41776 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-ffcd5698d-zt8tm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddc9a5ce2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=41776 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-ffcd5698d-zt8tm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 8fa53dfd-90f1-4a9b-88a5-df11fcc45aba default }" containerID=242b0ad0483a95fba7344d695d13e6eb4e324345a65e746f773bead955e3aacf datapathConfiguration="&{false false false false false }" interface=lxcbef9e4c43382 k8sPodName=openstack/staffeln-api-75cfb98b9f-cwlxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=242b0ad048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-api-75cfb98b9f-cwlxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=242b0ad048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-api-75cfb98b9f-cwlxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=242b0ad048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=39061 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-api-75cfb98b9f-cwlxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=242b0ad048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=39061 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-api-75cfb98b9f-cwlxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 fe525153-dc21-4ac0-9565-caabd629b99e default }" containerID=b60ea21a53979661a6492d169bb5417cec4f39f6d65fa36ccdf57ca10259c37b datapathConfiguration="&{false false false false false }" interface=lxcbffeebfeb979 k8sPodName=openstack/staffeln-db-init-pfqlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b60ea21a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-init-pfqlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b60ea21a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-init-pfqlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b60ea21a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=16032 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-init-pfqlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b60ea21a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=16032 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-init-pfqlv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddc9a5ce2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2482 identity=41776 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-ffcd5698d-zt8tm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddc9a5ce2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2482 identity=41776 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-ffcd5698d-zt8tm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=242b0ad048 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=989 identity=39061 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-api-75cfb98b9f-cwlxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=242b0ad048 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=989 identity=39061 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-api-75cfb98b9f-cwlxw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b60ea21a53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=173 identity=16032 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-init-pfqlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b60ea21a53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=173 identity=16032 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-init-pfqlv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b60ea21a53 endpointID=173 k8sNamespace=openstack k8sPodName=staffeln-db-init-pfqlv subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8867949c-2c46-4cdb-ada1-8f333a8fde88 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b60ea21a53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=173 identity=16032 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-init-pfqlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 8a00bfcd-d56b-426a-81e2-599565deed18 default }" containerID=fc7c64810b4f47d93c906034da0a2f927ce80ea7d1c6cea207c4b765cd9ce45a datapathConfiguration="&{false false false false false }" interface=lxc763917bc54d4 k8sPodName=openstack/staffeln-db-sync-vx6vm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc7c64810b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/staffeln-db-sync-vx6vm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc7c64810b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f901097d-018b-48d0-b1c5-6e8fb4f8107e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f901097d-018b-48d0-b1c5-6e8fb4f8107e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/staffeln-db-sync-vx6vm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f901097d-018b-48d0-b1c5-6e8fb4f8107e;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f901097d-018b-48d0-b1c5-6e8fb4f8107e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc7c64810b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 identity=27496 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f901097d-018b-48d0-b1c5-6e8fb4f8107e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f901097d-018b-48d0-b1c5-6e8fb4f8107e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/staffeln-db-sync-vx6vm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc7c64810b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 identity=27496 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/staffeln-db-sync-vx6vm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc7c64810b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3415 identity=27496 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/staffeln-db-sync-vx6vm subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc7c64810b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3415 identity=27496 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/staffeln-db-sync-vx6vm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager