level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.21285ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="64.871µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.543998ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.621µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=108.868437ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="18.421µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="56.812µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="106.384µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="143.093µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="87.272µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="541.873µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="27.211µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.686478ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.2874ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="44.301µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="40.241µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="233.816µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="104.562µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="75.772µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=54.658409ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="78.552µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="16.541µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.36.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.428286ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="7.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.565476ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="8.321µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.891615ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.891µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="30.68µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="61.131µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="288.636µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.96µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="226.276µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="732.577µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.24569ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="8.14µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="26.421µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.36 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.36 ipAddr.ipv6="" k8sNodeIP=162.253.55.36 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.36" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.129" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.36" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.36} {CiliumInternalIP 10.0.0.129}] 10.0.0.0/24 [] [] 10.0.0.180 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36201" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.633023463s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="15.951µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.37µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="147.414µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.401µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.630167605s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=308.531058ms file-path=/var/run/cilium/state/templates/6a93b456971311e540bf8e47430739da9dece9c1f510419c2400ad14e9da207a/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=528 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 be1010d5-e260-4994-8adb-4a60403faaca default }" containerID=e1cbbe527aa95f8ea915221c065bd41ea4a0c3cd457c57c8ef88ae3c21257b4a datapathConfiguration="&{false false false false false }" interface=lxcb1608ac5986e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.206 e56770a7-4704-4a85-ba48-ff3cc9a529e2 default }" containerID=6aec7191c76b4801dc6ee7212e14c3bf44b57f6996d1ef7b1c3ee40a8e835e7f datapathConfiguration="&{false false false false false }" interface=lxc50b13aa799dc k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6aec7191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 subsys=endpoint level=info msg="New endpoint" containerID=e1cbbe527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6aec7191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e1cbbe527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6aec7191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=22682 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=6aec7191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=22682 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e1cbbe527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1cbbe527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 identity=18826 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1cbbe527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3520 identity=18826 ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 ipv4=10.0.0.180 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identityLabels="reserved:health" ipv4=10.0.0.180 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identity=4 identityLabels="reserved:health" ipv4=10.0.0.180 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.116426111s file-path=/var/run/cilium/state/templates/88d99ba53cf2ecbb0b6dadd5f526e91ddb8d6838b0c18be402691b3ddfd24f9b/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2894 identity=4 ipv4=10.0.0.180 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6aec7191c7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1906 identity=22682 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6aec7191c7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1906 identity=22682 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1cbbe527a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3520 identity=18826 ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1cbbe527a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3520 identity=18826 ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1cbbe527a endpointID=3520 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-jmcjw subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ac60769c-5827-4ba5-ae83-52cbdda719c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e1cbbe527a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3520 identity=18826 ipv4=10.0.0.215 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jmcjw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 bd261b6d-1e4e-4d1d-9d9c-1b31a1a5a119 default }" containerID=76336c2f77f36a3210f4a7e8ddd14ab84231d410fef3fb75a46c5d61d4b6669a datapathConfiguration="&{false false false false false }" interface=lxc0f40c86c87fb k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n5f4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76336c2f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n5f4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76336c2f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n5f4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76336c2f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=5381 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n5f4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76336c2f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=5381 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n5f4x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76336c2f77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3694 identity=5381 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n5f4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=76336c2f77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3694 identity=5381 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n5f4x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=528 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00528 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00528 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00528 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00528:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=528 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 9e84676e-7568-4007-be07-1729934d0f45 default }" containerID=0670c89745bbd8b46f23a05a8ab3d1fd6f419bc0534528331496af9eb6afbfff datapathConfiguration="&{false false false false false }" interface=lxca30f6c537dfb k8sPodName=kube-system/coredns-67659f764b-gcbgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0670c89745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3037 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-gcbgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0670c89745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3037 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-gcbgl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0670c89745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3037 identity=22682 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-gcbgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0670c89745 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3037 identity=22682 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-gcbgl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0670c89745 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3037 identity=22682 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-gcbgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0670c89745 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3037 identity=22682 ipv4=10.0.0.35 ipv6= k8sPodName=kube-system/coredns-67659f764b-gcbgl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 c1c16258-112f-4256-8b85-b359eb0330e4 default }" containerID=fc746b32a71dae86b821bc52cbf338a352ed2b177498a4e0137d07e28eece1fb datapathConfiguration="&{false false false false false }" interface=lxc35915227edf6 k8sPodName=kube-system/coredns-67659f764b-cgp5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc746b32a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgp5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc746b32a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgp5w subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fc746b32a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=22682 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgp5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc746b32a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=22682 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgp5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc746b32a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=739 identity=22682 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgp5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc746b32a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=739 identity=22682 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgp5w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.220 ba6953b6-a58d-4a4c-b56f-35de73ac075a default }" containerID=5461106057987d104993c1f4a431ba71f0bebba5630f6c6bd67198d2711e0ad7 datapathConfiguration="&{false false false false false }" interface=lxcc393346310a0 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r4w7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5461106057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r4w7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5461106057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r4w7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5461106057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=35128 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r4w7l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5461106057 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=35128 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r4w7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5461106057 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=474 identity=35128 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r4w7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=5461106057 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=474 identity=35128 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r4w7l subsys=daemon level=info msg="Delete endpoint request" containerID=6aec7191c7 endpointID=1906 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-w2nj9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=6aec7191c7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1906 identity=22682 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w2nj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 a1d27c9a-fc72-43f7-92e1-e94208f2a92a default }" containerID=720ae178ad55b98525b8a1d6aee1f45d1b0b99b42968e6c213d09391aec2c593 datapathConfiguration="&{false false false false false }" interface=lxcf07a595bd0f4 k8sPodName=cert-manager/cert-manager-75969b45cf-m558g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=720ae178ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-m558g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=720ae178ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-m558g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=720ae178ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=7140 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-m558g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=720ae178ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=7140 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-m558g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=720ae178ad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2515 identity=7140 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-m558g subsys=endpoint level=info msg="Successful endpoint creation" containerID=720ae178ad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2515 identity=7140 ipv4=10.0.0.252 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-m558g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 1eae0184-1630-4aec-9a4b-0d7f1713d5d5 default }" containerID=c7c03889265a36dee836743fb4df1123e873f0659b10dfcee5c045656b99c5a2 datapathConfiguration="&{false false false false false }" interface=lxc6e43468da9f2 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-5wwgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7c0388926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-5wwgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7c0388926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-5wwgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.202 86ef01f9-436d-43f4-beb5-4ca9cc98316f default }" containerID=c496cd81019558c29e480f97d03cffa21bc1616c54a7d5fa41c3e96a8131c578 datapathConfiguration="&{false false false false false }" interface=lxc01b8e00c9ee9 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6v4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c496cd8101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6v4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c496cd8101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6v4c subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7c0388926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=13792 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-5wwgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7c0388926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=13792 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-5wwgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c496cd8101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=10462 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6v4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c496cd8101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=10462 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6v4c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7c0388926 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=329 identity=13792 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-5wwgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7c0388926 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=329 identity=13792 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-5wwgd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c496cd8101 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2850 identity=10462 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6v4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=c496cd8101 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2850 identity=10462 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6v4c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 20c20618-985f-4f70-810b-fd25058561c7 default }" containerID=ae64301c4a15811bd5607cb7a3fe315db57dfbbbdd9d09c496f162ae94048b0e datapathConfiguration="&{false false false false false }" interface=lxc2ff13d322d86 k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae64301c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 ipv4=10.0.0.67 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae64301c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.67 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae64301c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identity=28801 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.67 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae64301c4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2664 identity=28801 ipv4=10.0.0.67 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae64301c4a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2664 identity=28801 ipv4=10.0.0.67 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae64301c4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2664 identity=28801 ipv4=10.0.0.67 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae64301c4a endpointID=2664 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-wkjt9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=5411ef34-7beb-419b-b7b8-3146851078f4 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ae64301c4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2664 identity=28801 ipv4=10.0.0.67 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkjt9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 9c5a18f4-8988-4641-b485-d7c5d26fe2ff default }" containerID=72115cb64c01eea271fe8c71fff10da1f244a6de2644d5695ae66536df4a46fd datapathConfiguration="&{false false false false false }" interface=lxc2a26c44b3b95 k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72115cb64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72115cb64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72115cb64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=43267 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72115cb64c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=43267 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72115cb64c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=215 identity=43267 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl subsys=endpoint level=info msg="Successful endpoint creation" containerID=72115cb64c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=215 identity=43267 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72115cb64c endpointID=215 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-bcchl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=1e93bf72-2a20-4bb5-91dc-86d440bd3f99 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=72115cb64c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=215 identity=43267 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bcchl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 d8cf6f2e-b8a9-43a2-8f02-b185ee0b069e default }" containerID=6c55e19135c046d6981b8da4b1ccce02ceb1be42705304a83d344cc10be08e01 datapathConfiguration="&{false false false false false }" interface=lxc569ba3e48626 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c55e19135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2577 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c55e19135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2577 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6c55e19135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2577 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6c55e19135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2577 identity=34475 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c55e19135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2577 identity=34475 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c55e19135 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2577 identity=34475 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c55e19135 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2577 identity=34475 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-rtv28 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 b392766e-3c60-4856-add3-a3fda6b4914c default }" containerID=814526ee4865a1023d9bf441bdb3b7a400dbbc144db2734f69cbb6245a32f9c0 datapathConfiguration="&{false false false false false }" interface=lxc10dfeaee68c0 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=814526ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=814526ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=814526ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identity=39930 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=814526ee48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identity=39930 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=814526ee48 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1309 identity=39930 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=814526ee48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1309 identity=39930 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=814526ee48 endpointID=1309 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-6vsk6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=84878ffa-4e66-4109-9ce4-0dd0bb95dcfc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=814526ee48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1309 identity=39930 ipv4=10.0.0.185 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6vsk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 1dc35a9e-1b27-43fb-933c-046a122bc387 default }" containerID=e9ea4b3b531d68afc5bfc455d7b466f3ac22c7415e334085e5cb1d700387df13 datapathConfiguration="&{false false false false false }" interface=lxc79904b02b387 k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9ea4b3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9ea4b3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e9ea4b3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9ea4b3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identity=16741 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9ea4b3b53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identity=16741 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9ea4b3b53 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3728 identity=16741 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9ea4b3b53 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3728 identity=16741 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-456rs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 5e268360-8bc6-41bf-9da5-2f96442cbd60 default }" containerID=c19b66cd4869e81ffc52a6a55ff8b607521f48b632bf7479716b770d758658b9 datapathConfiguration="&{false false false false false }" interface=lxc75cdbded9e92 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-f9fpt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c19b66cd48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2851 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-f9fpt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c19b66cd48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2851 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-f9fpt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c19b66cd48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2851 identity=44314 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-f9fpt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c19b66cd48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2851 identity=44314 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-f9fpt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c19b66cd48 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2851 identity=44314 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-f9fpt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c19b66cd48 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2851 identity=44314 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-f9fpt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 225c88c0-34ec-448c-b900-a9584a96ba60 default }" containerID=aae03e76aa57e7ecff0e2f042eb411cf81ffb42688ec814e288ab6b53395bb3d datapathConfiguration="&{false false false false false }" interface=lxceb55fa7d3f71 k8sPodName=openstack/pxc-operator-59d66cbc78-dtqn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aae03e76aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-dtqn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aae03e76aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-dtqn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aae03e76aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=34437 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-dtqn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aae03e76aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=34437 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-dtqn4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aae03e76aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3583 identity=34437 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-dtqn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aae03e76aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3583 identity=34437 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-dtqn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 8a71b703-f90e-4f6d-b13f-f415e3cc9915 default }" containerID=825406559686ed270e4cb053dd5efa846697bedd118f214253c7261f56537ba1 datapathConfiguration="&{false false false false false }" interface=lxc06dc35ed2574 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8254065596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8254065596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8254065596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 identity=13500 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8254065596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3534 identity=13500 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 fff01e8f-0f2a-4bb5-ae40-f077c49e9b3b default }" containerID=17b72c30720fc1b98de25e2daff87a3364794c1e45a6271baf857781c1d762e1 datapathConfiguration="&{false false false false false }" interface=lxc3aaab2fd6cd6 k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17b72c3072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17b72c3072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17b72c3072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=13307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17b72c3072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=13307 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8254065596 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3534 identity=13500 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8254065596 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3534 identity=13500 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=17b72c3072 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=81 identity=13307 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 subsys=endpoint level=info msg="Successful endpoint creation" containerID=17b72c3072 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=81 identity=13307 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17b72c3072 endpointID=81 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=17b72c3072 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=81 identity=13307 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d87dde5a-bd32-4b32-bec2-f21c3b611a36 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 766b02ff-6bea-49f8-9df0-89597e348a2c default }" containerID=eb24b60aa75ca22960d5a902e21203b82f72d80550b708174a972ae30a47dc62 datapathConfiguration="&{false false false false false }" interface=lxc6e61011356b4 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb24b60aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb24b60aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eb24b60aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb24b60aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identity=6338 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb24b60aa7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2164 identity=6338 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb24b60aa7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2164 identity=6338 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb24b60aa7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2164 identity=6338 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.106 c93d6af0-a8e4-41d5-8558-b5497aaff687 default }" containerID=61fffc9ba991b3ecbfe8cb5c98238e93951d2adba34583a970bb3792021a81d5 datapathConfiguration="&{false false false false false }" interface=lxc1fe388aac643 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61fffc9ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 ipv4=10.0.0.106 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61fffc9ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.106 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61fffc9ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identity=5118 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.106 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=61fffc9ba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identity=5118 ipv4=10.0.0.106 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61fffc9ba9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1166 identity=5118 ipv4=10.0.0.106 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61fffc9ba9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1166 identity=5118 ipv4=10.0.0.106 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 fccb28ff-ad45-4a62-a820-5d872d046895 default }" containerID=1f8417ac36740a1dea91ab416dbd8f4a04905fecaa1a46ccebdf9bbabdba64d5 datapathConfiguration="&{false false false false false }" interface=lxcd929314f7cd2 k8sPodName=monitoring/node-feature-discovery-worker-n26xf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f8417ac36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n26xf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f8417ac36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n26xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1f8417ac36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=10571 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n26xf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f8417ac36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1108 identity=10571 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n26xf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 739d96bc-dbd1-41a2-8c6d-5255552ce88b default }" containerID=c7c0a3033a8c6bbf93baf803acc284f5c969f489f579cf4b65fe464a7e6827a3 datapathConfiguration="&{false false false false false }" interface=lxc53458f4f140b k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-csfsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7c0a3033a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-csfsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7c0a3033a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-csfsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7c0a3033a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=49606 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-csfsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7c0a3033a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=49606 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-csfsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f8417ac36 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1108 identity=10571 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n26xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f8417ac36 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1108 identity=10571 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-n26xf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c7c0a3033a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=561 identity=49606 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-csfsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7c0a3033a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=561 identity=49606 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-csfsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 19472f84-4a60-4ad1-8f6e-137e03673b45 default }" containerID=4433b73bba07257ae73c9e965de4a06ef54b1b6f5fef47dd484f105622a797fe datapathConfiguration="&{false false false false false }" interface=lxc33393c8681c6 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tj5s4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4433b73bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3055 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tj5s4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4433b73bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3055 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tj5s4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4433b73bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3055 identity=65369 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tj5s4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4433b73bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3055 identity=65369 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tj5s4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4433b73bba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3055 identity=65369 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tj5s4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4433b73bba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3055 identity=65369 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tj5s4 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=528 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00528 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00528 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00528 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00528:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=528 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01334762671283834 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.59 1f8f0855-2c36-4d42-9288-3a74f98c9372 default }" containerID=9f753865ce9a684cce8b990e1a2ae7ad67da0ddb7c6ff713b1e75d52e65de1e1 datapathConfiguration="&{false false false false false }" interface=lxc6f3a3b2c540e k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f753865ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f753865ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f753865ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 identity=25115 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f753865ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2195 identity=25115 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f753865ce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2195 identity=25115 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f753865ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2195 identity=25115 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f753865ce endpointID=2195 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-zkl85 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=6b905fb7-ec99-4e6a-9982-89d65ddbfed6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9f753865ce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2195 identity=25115 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zkl85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 ef108627-7df5-476a-8c60-cb62bbd16014 default }" containerID=4c563226431fe0529c67f0cd025ebfbea55bea455b2caf677063e66edcc45b37 datapathConfiguration="&{false false false false false }" interface=lxca67535bd26c7 k8sPodName=monitoring/kube-prometheus-stack-grafana-586f849cb5-qwzv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c56322643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-586f849cb5-qwzv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c56322643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-586f849cb5-qwzv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c56322643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=19119 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-586f849cb5-qwzv7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4c56322643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=19119 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-586f849cb5-qwzv7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c56322643 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=535 identity=19119 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-586f849cb5-qwzv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c56322643 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=535 identity=19119 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-586f849cb5-qwzv7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 fb376d55-c072-42c5-9d58-e398adca0317 default }" containerID=cf6e574f8cf701bb813807a1beb6f636e211bf96366e14d6cb7ac7483d995dc8 datapathConfiguration="&{false false false false false }" interface=lxcfa2f2391df63 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-p859v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf6e574f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-p859v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf6e574f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-p859v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf6e574f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=2185 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-p859v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf6e574f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2170 identity=2185 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-p859v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 e05303b5-c3bd-45e0-9ee9-e1b5d9ad197f default }" containerID=4d39fcd4b03cc93c854ca210cf255651c7cc7449f2d60e1852d778a7c0329481 datapathConfiguration="&{false false false false false }" interface=lxcd299c9bea89d k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gpwdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d39fcd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gpwdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d39fcd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gpwdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d39fcd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=63878 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gpwdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d39fcd4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=63878 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gpwdm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf6e574f8c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2170 identity=2185 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-p859v subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf6e574f8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2170 identity=2185 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-p859v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d39fcd4b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3158 identity=63878 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gpwdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d39fcd4b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3158 identity=63878 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-gpwdm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 aea752c7-58df-46c8-b2cc-097eb8dbebb2 default }" containerID=51ded1b959ad7e2063c2f6ffd9a778b709cbf185332fbe641076dd54d59de067 datapathConfiguration="&{false false false false false }" interface=lxc19efeb2d6a04 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51ded1b959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51ded1b959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51ded1b959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=18879 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51ded1b959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=18879 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51ded1b959 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=122 identity=18879 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x subsys=endpoint level=info msg="Successful endpoint creation" containerID=51ded1b959 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=122 identity=18879 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51ded1b959 endpointID=122 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-s674x subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=a743b680-2f24-4f5f-9078-4a3ce1b9428a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=51ded1b959 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=122 identity=18879 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-s674x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 3df4f35f-fb2d-4579-85ee-b15b28130cbb default }" containerID=862accc2e1647d877cda1a23fd2dcace3c9ed8bdb4725b482f1dae9fa1140877 datapathConfiguration="&{false false false false false }" interface=lxce6afca2d605f k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=862accc2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=862accc2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=862accc2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=13307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=862accc2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=13307 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=862accc2e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=294 identity=13307 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a subsys=endpoint level=info msg="Successful endpoint creation" containerID=862accc2e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=294 identity=13307 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 bc755fbe-f988-4f5e-95e2-f3638fbc306c default }" containerID=052966f2e0bae4a9ef7be757933488afacbfbf23b31aec5838f5f79c35690795 datapathConfiguration="&{false false false false false }" interface=lxc72d1a2fc68dc k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=052966f2e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=052966f2e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=052966f2e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=13307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=052966f2e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=118 identity=13307 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=052966f2e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=118 identity=13307 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c subsys=endpoint level=info msg="Successful endpoint creation" containerID=052966f2e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=118 identity=13307 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c subsys=daemon level=info msg="Delete endpoint request" containerID=052966f2e0 endpointID=118 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=862accc2e1 endpointID=294 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=052966f2e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=118 identity=13307 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ea65c76-b2c3-4625-bdac-728f65bd227c subsys=endpoint level=info msg="Removed endpoint" containerID=862accc2e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=294 identity=13307 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c893e38-2a06-4866-bb72-fec433de6e1a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 8eb915ce-973b-49a0-9a1c-1256435233f9 default }" containerID=09873a30262849a9473bf7998e6c6ced04e306e2a656cda1f0cf4f9485bc2010 datapathConfiguration="&{false false false false false }" interface=lxce564d16da88b k8sPodName=monitoring/loki-gateway-5cc45946cd-vr52w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09873a3026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vr52w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09873a3026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vr52w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09873a3026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=11398 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vr52w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09873a3026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=11398 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vr52w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=09873a3026 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=10 identity=11398 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vr52w subsys=endpoint level=info msg="Successful endpoint creation" containerID=09873a3026 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=10 identity=11398 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-vr52w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 fdcc0090-b849-4a01-8880-4cbc2bef28bc default }" containerID=c531380c272787dbaa2711bdbd9d442ea9152ec18bd8cccd41cce8f070919f66 datapathConfiguration="&{false false false false false }" interface=lxcc22f4b18776f k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c531380c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c531380c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c531380c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c531380c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=15512 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c531380c27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=15512 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c531380c27 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1224 identity=15512 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c531380c27 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1224 identity=15512 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.223 ba38f695-81fa-40fe-97be-8ead1a603cd5 default }" containerID=f91a42e67b1bcca727128c76f773200b11ebd28424fded0b263f39eeda474224 datapathConfiguration="&{false false false false false }" interface=lxc10aa88e8430c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f91a42e67b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f91a42e67b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f91a42e67b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=13166 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f91a42e67b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=13166 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f91a42e67b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1046 identity=13166 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f91a42e67b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1046 identity=13166 ipv4=10.0.0.223 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 5ceda377-8981-4a85-9de0-96d17618cdd1 default }" containerID=01deabc62b3e8df449bec004f67963de54fd4b8807f3df089dfe59e72ecf7997 datapathConfiguration="&{false false false false false }" interface=lxc211633f1c130 k8sPodName=monitoring/vector-4wn82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01deabc62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-4wn82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01deabc62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-4wn82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01deabc62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=11831 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-4wn82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01deabc62b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=11831 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-4wn82 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 0601d59a-bd0e-4562-bb7d-b7936310b0f6 default }" containerID=e3d0d0e139fe9d8f04fe7862d57bdd1d293699586827cf87899252e10273b757 datapathConfiguration="&{false false false false false }" interface=lxc069df1e7d0a7 k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3d0d0e139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3d0d0e139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3d0d0e139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=13307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3d0d0e139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01deabc62b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=785 identity=11831 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-4wn82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01deabc62b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=785 identity=11831 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/vector-4wn82 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e3d0d0e139 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=242 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3d0d0e139 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=242 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e3d0d0e139 endpointID=242 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e3d0d0e139 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=242 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5ec7de3-1f03-4325-b237-15beffed77a0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 cefa7aa9-242a-4ff8-8e65-caaeb81e9a84 default }" containerID=651e923eb8a33e79e47cea0f96e84262931d5086c1b9a4491bfe5e1d619583f4 datapathConfiguration="&{false false false false false }" interface=lxc7495afc92d12 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=651e923eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=651e923eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=651e923eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=651e923eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=38039 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=651e923eb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=38039 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=651e923eb8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=592 identity=38039 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=651e923eb8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=592 identity=38039 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-g8h6t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 da484b12-2c5e-4658-9a84-2f09951104a7 default }" containerID=5fe45c818999f8b66b6bd6e2b26a982ed8367206fe4b7762e1713575a51366c6 datapathConfiguration="&{false false false false false }" interface=lxc78f2774bcccc k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fe45c8189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fe45c8189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fe45c8189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identity=9231 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fe45c8189 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2917 identity=9231 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fe45c8189 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2917 identity=9231 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fe45c8189 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2917 identity=9231 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 7c24dbcc-4893-456f-8116-cc97722829f5 default }" containerID=b5d142a6d643aef3e439607feaaddc98f265991b51b98b05e6106db87f448d1c datapathConfiguration="&{false false false false false }" interface=lxc42e7770b9cf3 k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5d142a6d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5d142a6d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b5d142a6d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b5d142a6d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 identity=31905 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5d142a6d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2315 identity=31905 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5d142a6d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2315 identity=31905 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5d142a6d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2315 identity=31905 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-j95s4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 bca4a895-7bdf-405c-9911-c3f5281595fe default }" containerID=56aa2fdbfb3a9776df771ebb94dbbc6f8503bd8b5e5acf5398aea8310065a03a datapathConfiguration="&{false false false false false }" interface=lxc759f9952fb11 k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56aa2fdbfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56aa2fdbfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56aa2fdbfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=13307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56aa2fdbfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=969 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56aa2fdbfb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=969 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e subsys=endpoint level=info msg="Successful endpoint creation" containerID=56aa2fdbfb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=969 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e subsys=daemon level=info msg="Delete endpoint request" containerID=56aa2fdbfb endpointID=969 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=56aa2fdbfb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=969 identity=13307 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39e859ad-9224-4290-ae9d-14d503a26c4e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 40ee4d34-55d0-4078-b7c5-2aa1bb169e91 default }" containerID=ee2610fae49ee697bfab142c4c71c147826cdeb64565d0d66f850ffe394892f3 datapathConfiguration="&{false false false false false }" interface=lxc8d2bafa6202a k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee2610fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee2610fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee2610fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee2610fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identity=30549 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee2610fae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identity=30549 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee2610fae4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2313 identity=30549 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee2610fae4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2313 identity=30549 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 1f5eb53e-b57b-4b5b-9189-746f5dd9c833 default }" containerID=a1a79fcfd10da479b3b2a01dbe162cf9ee7b705447084eb450d5aba851667922 datapathConfiguration="&{false false false false false }" interface=lxc44ddd6e5f58b k8sPodName=openstack/keystone-api-56c67f5499-4pgbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1a79fcfd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-56c67f5499-4pgbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1a79fcfd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-56c67f5499-4pgbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1a79fcfd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=33616 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-56c67f5499-4pgbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1a79fcfd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=33616 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-56c67f5499-4pgbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 a1af1fe3-d765-4430-8ed8-3d8a1d2c9f20 default }" containerID=9de4c7bb9994bc4090b9c23ae2cc3ab669dd76afa6c51dc13fbc0f581e8ce953 datapathConfiguration="&{false false false false false }" interface=lxc24380e360714 k8sPodName=openstack/keystone-credential-setup-xvs8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9de4c7bb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-xvs8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9de4c7bb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-xvs8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9de4c7bb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=6355 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-xvs8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9de4c7bb99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1437 identity=6355 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-xvs8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1a79fcfd1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3117 identity=33616 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-56c67f5499-4pgbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1a79fcfd1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3117 identity=33616 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-api-56c67f5499-4pgbb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9de4c7bb99 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1437 identity=6355 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-xvs8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=9de4c7bb99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1437 identity=6355 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-xvs8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9de4c7bb99 endpointID=1437 k8sNamespace=openstack k8sPodName=keystone-credential-setup-xvs8w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=1b9ac571-4c66-486d-8f18-92217662d8d3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9de4c7bb99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1437 identity=6355 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-credential-setup-xvs8w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 e3557805-5594-4936-9b75-70ad5d11aac0 default }" containerID=341dee21f7d5ee8752301ca4fced4ae963b24d96277c029440ebd84e6545ee76 datapathConfiguration="&{false false false false false }" interface=lxc2c0ba5685f85 k8sPodName=openstack/keystone-db-init-qfj2g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=341dee21f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2487 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-init-qfj2g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=341dee21f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2487 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-init-qfj2g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=341dee21f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2487 identity=43034 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-init-qfj2g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=341dee21f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2487 identity=43034 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-init-qfj2g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=341dee21f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2487 identity=43034 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-init-qfj2g subsys=endpoint level=info msg="Successful endpoint creation" containerID=341dee21f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2487 identity=43034 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-init-qfj2g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=341dee21f7 endpointID=2487 k8sNamespace=openstack k8sPodName=keystone-db-init-qfj2g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=61900a9f-7833-45b5-af2a-6e606b19ec20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=341dee21f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2487 identity=43034 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/keystone-db-init-qfj2g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 c3a5d548-de5c-4980-8b8a-1f1d91affedc default }" containerID=7d54754f9c6b835ef8fddb54c41b21f26c65d25ae7a76c7756a1f41f26a41c85 datapathConfiguration="&{false false false false false }" interface=lxc4b4a5d7e6625 k8sPodName=openstack/keystone-fernet-setup-p8n68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d54754f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-fernet-setup-p8n68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d54754f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-fernet-setup-p8n68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d54754f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=14811 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-fernet-setup-p8n68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d54754f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=14811 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-fernet-setup-p8n68 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7d54754f9c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1901 identity=14811 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-fernet-setup-p8n68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d54754f9c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1901 identity=14811 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-fernet-setup-p8n68 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d54754f9c endpointID=1901 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-p8n68 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a39077ec-535f-486c-a45c-a033570bf0a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7d54754f9c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1901 identity=14811 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-fernet-setup-p8n68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 b9c31027-a5cc-43b0-8051-cc7635c3b6a2 default }" containerID=56a877d2938c317581efb240ac144800453bfa9a6759616c85115f511c8ea9b6 datapathConfiguration="&{false false false false false }" interface=lxc5755240668a4 k8sPodName=openstack/keystone-db-sync-cc2xn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56a877d293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-cc2xn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56a877d293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-cc2xn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56a877d293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=21976 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-cc2xn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56a877d293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=21976 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-cc2xn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56a877d293 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=17 identity=21976 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-cc2xn subsys=endpoint level=info msg="Successful endpoint creation" containerID=56a877d293 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=17 identity=21976 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-cc2xn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=56a877d293 endpointID=17 k8sNamespace=openstack k8sPodName=keystone-db-sync-cc2xn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=e45254ad-7542-4fb0-a946-3187f5c828b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=56a877d293 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=17 identity=21976 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-db-sync-cc2xn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 a612210e-3f17-40b1-a083-783594b8cb1d default }" containerID=3d184542fb698a32a4bb6e4372f94008fda79d6bab46e80879f0da021708d580 datapathConfiguration="&{false false false false false }" interface=lxcb432e5755310 k8sPodName=openstack/keystone-rabbit-init-7rxxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d184542fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-7rxxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d184542fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-7rxxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d184542fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 identity=13261 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-7rxxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d184542fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=762 identity=13261 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-7rxxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d184542fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=762 identity=13261 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-7rxxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d184542fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=762 identity=13261 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-7rxxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d184542fb endpointID=762 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-7rxxt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=cb2659cd-d827-497a-a9eb-4cde4653447e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3d184542fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=762 identity=13261 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-7rxxt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 64410dfc-951b-406a-9a57-7c434d650e46 default }" containerID=ccf8aa29005bc0250f6a12425a14637b495b651d62a80e41672a89722acd15ab datapathConfiguration="&{false false false false false }" interface=lxccde0befb48a6 k8sPodName=openstack/keystone-domain-manage-srrmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccf8aa2900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccf8aa2900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ccf8aa2900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccf8aa2900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=12497 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccf8aa2900 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=12497 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccf8aa2900 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=121 identity=12497 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccf8aa2900 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=121 identity=12497 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccf8aa2900 endpointID=121 k8sNamespace=openstack k8sPodName=keystone-domain-manage-srrmf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=9c88591f-9ca7-45a9-a182-feb754d6f6dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ccf8aa2900 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=121 identity=12497 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-domain-manage-srrmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 8bf54133-f41f-401f-9f44-24f45b77d629 default }" containerID=3f067efb34cc98607f57f9c49178d76bc3d3d98caf5400c6c007506fc768cae6 datapathConfiguration="&{false false false false false }" interface=lxc5107348ed0fc k8sPodName=openstack/keystone-bootstrap-hll7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f067efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3781 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-hll7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f067efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3781 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-hll7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3f067efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3781 identity=44774 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-hll7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f067efb34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3781 identity=44774 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-hll7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f067efb34 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3781 identity=44774 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-hll7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f067efb34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3781 identity=44774 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-hll7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f067efb34 endpointID=3781 k8sNamespace=openstack k8sPodName=keystone-bootstrap-hll7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0bdad3c0-e8ef-456d-9562-da3abd688c78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3f067efb34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3781 identity=44774 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-bootstrap-hll7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 96aca2ba-1b22-43ca-b891-b83a095cd651 default }" containerID=aafcbc25a4c53f26da951906b1cc405a6cc00092907c60d06df510d7192b5642 datapathConfiguration="&{false false false false false }" interface=lxc950372b12218 k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aafcbc25a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aafcbc25a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aafcbc25a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=13307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aafcbc25a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=13307 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aafcbc25a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=551 identity=13307 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aafcbc25a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=551 identity=13307 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 subsys=daemon level=info msg="Delete endpoint request" containerID=aafcbc25a4 endpointID=551 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aafcbc25a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=551 identity=13307 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b5fc506-496f-4b46-8808-e69988456d94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 1bec2e8e-9b83-4a9e-9da9-1a6edaeb1b8a default }" containerID=ed65c878aa8d1b14b01a0ba78bbdd97104c15c3fec93e07dd9c8cf612486d145 datapathConfiguration="&{false false false false false }" interface=lxce985c1025622 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed65c878aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed65c878aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed65c878aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed65c878aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=9882 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed65c878aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=9882 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed65c878aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3523 identity=9882 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed65c878aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3523 identity=9882 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 57a42b7d-360b-49ce-a679-8f879267f582 default }" containerID=a7b8868685fca1dffd6f9ffcbd6ce74095f593672fa91b31d804f00eb951f3cc datapathConfiguration="&{false false false false false }" interface=lxcb7128241d71c k8sPodName=openstack/barbican-api-745866b58-4csx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7b8868685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-745866b58-4csx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7b8868685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-745866b58-4csx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a7b8868685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-745866b58-4csx9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a7b8868685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 identity=10724 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-745866b58-4csx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7b8868685 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3501 identity=10724 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-745866b58-4csx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 b5463b7e-8b2e-4192-b4f4-7a9d5edd82b4 default }" containerID=3571f7e35519e0838bc6e275092029d88371ed3a302cef57343901d1d67c6a04 datapathConfiguration="&{false false false false false }" interface=lxc58437b6506bb k8sPodName=openstack/barbican-db-init-xh58f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3571f7e355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-xh58f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3571f7e355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-xh58f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3571f7e355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=9864 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-xh58f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3571f7e355 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=9864 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-xh58f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7b8868685 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3501 identity=10724 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-745866b58-4csx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7b8868685 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3501 identity=10724 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-api-745866b58-4csx9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3571f7e355 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=121 identity=9864 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-xh58f subsys=endpoint level=info msg="Successful endpoint creation" containerID=3571f7e355 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=121 identity=9864 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-xh58f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3571f7e355 endpointID=121 k8sNamespace=openstack k8sPodName=barbican-db-init-xh58f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=c2ebf5cc-ac59-4fe7-9d1a-53b81f2b1aa6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3571f7e355 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=121 identity=9864 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-db-init-xh58f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 e172d90d-76db-48ed-8cee-4f6ab675f5c8 default }" containerID=cd7e0bd4460aeed77eacda3610042552f53067810840048d3c49b9289c85bf56 datapathConfiguration="&{false false false false false }" interface=lxc438369765918 k8sPodName=openstack/barbican-db-sync-c8hdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd7e0bd446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd7e0bd446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cd7e0bd446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd7e0bd446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=276 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd7e0bd446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=276 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd7e0bd446 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=455 identity=276 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd7e0bd446 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=455 identity=276 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd7e0bd446 endpointID=455 k8sNamespace=openstack k8sPodName=barbican-db-sync-c8hdt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=5b9afc46-4611-4f37-bc5c-95efe6d14624 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cd7e0bd446 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=455 identity=276 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-db-sync-c8hdt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 5ffd0452-398e-4234-b437-e04ed74cff18 default }" containerID=fbcbd8151f91eefbf5559aaf4e2a3b5fe2d9a596a1011fb856582f93f77e3a4a datapathConfiguration="&{false false false false false }" interface=lxc4a950f49e167 k8sPodName=openstack/barbican-rabbit-init-7w5rb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbcbd8151f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-7w5rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbcbd8151f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-7w5rb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbcbd8151f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=12927 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-7w5rb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbcbd8151f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=12927 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-7w5rb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fbcbd8151f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=484 identity=12927 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-7w5rb subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbcbd8151f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=484 identity=12927 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-7w5rb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fbcbd8151f endpointID=484 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-7w5rb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3ddc69e2-5d6c-458c-b7b8-4f8d21d5a797 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fbcbd8151f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=484 identity=12927 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/barbican-rabbit-init-7w5rb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 9098512b-d72f-4cf3-91d7-3490e7abb492 default }" containerID=d05836c690cc8e08d02818286f2064543bcf92a03f8932097a09b198eb86c402 datapathConfiguration="&{false false false false false }" interface=lxce9cf4954a303 k8sPodName=openstack/barbican-ks-service-rv5fk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d05836c690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d05836c690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d05836c690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d05836c690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=34886 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d05836c690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=34886 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d05836c690 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=194 identity=34886 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d05836c690 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=194 identity=34886 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d05836c690 endpointID=194 k8sNamespace=openstack k8sPodName=barbican-ks-service-rv5fk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=0ec35d5a-90f7-4958-8d14-4016c95c6e9f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d05836c690 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=194 identity=34886 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-service-rv5fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 89b7ca53-a940-4cde-946f-d90c65b9c334 default }" containerID=62f6aa05d5a154a9df566744315cede8f4079010c43b94808f39af411b5a5053 datapathConfiguration="&{false false false false false }" interface=lxc6b687c596501 k8sPodName=openstack/barbican-ks-endpoints-4lhms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62f6aa05d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4lhms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62f6aa05d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4lhms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62f6aa05d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=5115 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4lhms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62f6aa05d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=5115 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4lhms subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=62f6aa05d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=553 identity=5115 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4lhms subsys=endpoint level=info msg="Successful endpoint creation" containerID=62f6aa05d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=553 identity=5115 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4lhms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62f6aa05d5 endpointID=553 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-4lhms subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=32c26c6f-582d-478b-9284-eb512a1c5dd3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=62f6aa05d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=553 identity=5115 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4lhms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 cfbd4d9d-144e-4acd-b7c2-e30556bd1984 default }" containerID=559bd7f21831a52d53bdf5ffe30e1ef5c8be65a1a4cf065b7b5393bb11aaf780 datapathConfiguration="&{false false false false false }" interface=lxcbb6bd00cafb1 k8sPodName=openstack/barbican-ks-user-tlpvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=559bd7f218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-tlpvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=559bd7f218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-tlpvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=559bd7f218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=1262 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-tlpvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=559bd7f218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=1262 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-tlpvv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=559bd7f218 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=681 identity=1262 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-tlpvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=559bd7f218 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=681 identity=1262 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-tlpvv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=559bd7f218 endpointID=681 k8sNamespace=openstack k8sPodName=barbican-ks-user-tlpvv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=0c3304d7-c225-4043-ad5b-e3110e175e97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=559bd7f218 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=681 identity=1262 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-tlpvv subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.193 c3edfeef-30f3-4265-b3ec-a68097e8fb7e default }" containerID=0dbc369ab663cc3b6e6182d99106d06bc9903207186df832ac8a8d0e198fc1f5 datapathConfiguration="&{false false false false false }" interface=lxc38f30efc6009 k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-qpmb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dbc369ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-qpmb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dbc369ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-qpmb7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0dbc369ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identity=46096 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-qpmb7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0dbc369ab6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2038 identity=46096 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-qpmb7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0dbc369ab6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2038 identity=46096 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-qpmb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dbc369ab6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2038 identity=46096 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-qpmb7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 bfbd8c07-ff03-4ddc-a7b8-01a307a26156 default }" containerID=ab309a13d6113a8ad1c86e9a628bb81cd3b25ae81f993671e3f13d3183e194ae datapathConfiguration="&{false false false false false }" interface=lxc04fa87413327 k8sPodName=openstack/rook-ceph-detect-version-ffv86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab309a13d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ffv86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab309a13d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ffv86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab309a13d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=45380 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ffv86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab309a13d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=45380 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ffv86 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ab309a13d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1564 identity=45380 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ffv86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab309a13d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1564 identity=45380 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ffv86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03778051320897642 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=ab309a13d6 endpointID=1564 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-ffv86 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=ce15a2b0-fab7-435a-8006-b61e0e0c1309 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=ab309a13d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1564 identity=45380 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ffv86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 b464d1c4-25a9-4ef1-bf9c-5a3a997d76d8 default }" containerID=7538d08248f0dfee9c201d088a1f346c1c295c34c049d54422f00e39fe32c5ca datapathConfiguration="&{false false false false false }" interface=lxca2e7f1409465 k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7538d08248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7538d08248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7538d08248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=13307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7538d08248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=13307 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7538d08248 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1352 identity=13307 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e subsys=endpoint level=info msg="Successful endpoint creation" containerID=7538d08248 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1352 identity=13307 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e subsys=daemon level=info msg="Delete endpoint request" containerID=7538d08248 endpointID=1352 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7538d08248 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1352 identity=13307 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b44da61-6bae-4a6e-ba91-afbe1741343e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 2ca3cb20-08a0-470e-b502-e6d82131a67a default }" containerID=ba6d85b6d3fee4310726e6559b968ae01f1edc3407ed3f1be6d435c3ccd27e00 datapathConfiguration="&{false false false false false }" interface=lxc1cec6984916d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba6d85b6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba6d85b6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba6d85b6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=7582 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba6d85b6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=7582 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba6d85b6d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1316 identity=7582 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba6d85b6d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1316 identity=7582 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 8f296c58-5669-46d2-8a41-847dbf77ffcd default }" containerID=aa794abcb16fb9dfceaca9baf21f905feccfd8b5cc0465ce487973b634131b13 datapathConfiguration="&{false false false false false }" interface=lxccf1f43df1700 k8sPodName=openstack/ceph-object-controller-detect-version-bswbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa794abcb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bswbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa794abcb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bswbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa794abcb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identity=16869 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bswbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa794abcb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2003 identity=16869 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bswbr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa794abcb1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2003 identity=16869 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bswbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa794abcb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2003 identity=16869 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bswbr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa794abcb1 endpointID=2003 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-bswbr subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a4491416-eb8d-4a71-ba6f-84b28fa4e638 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=aa794abcb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2003 identity=16869 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-bswbr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 d748a196-9ea6-472c-9d3f-13f60d3dcc4b default }" containerID=4d484525239d9920a81fd04199b573043dd886f2972e2d3e48de7df55fbb06cc datapathConfiguration="&{false false false false false }" interface=lxc092cc780dd39 k8sPodName=openstack/glance-db-init-z2xgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d48452523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d48452523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d48452523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d48452523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identity=27635 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d48452523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3216 identity=27635 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d48452523 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3216 identity=27635 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d48452523 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3216 identity=27635 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d48452523 endpointID=3216 k8sNamespace=openstack k8sPodName=glance-db-init-z2xgr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=9365eace-39ee-45f8-94ed-a8423d68b61a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4d48452523 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3216 identity=27635 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/glance-db-init-z2xgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 466e2d59-dae5-4077-87f8-eef4b8a6846b default }" containerID=4e9a6cf1f9561632309992d4d3a5078d99abcadeca45c620a9fcc9b2a8af4b0b datapathConfiguration="&{false false false false false }" interface=lxcd1d33caa317b k8sPodName=openstack/glance-db-sync-qt9nt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e9a6cf1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e9a6cf1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4e9a6cf1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4e9a6cf1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=35933 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e9a6cf1f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2174 identity=35933 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e9a6cf1f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2174 identity=35933 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e9a6cf1f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2174 identity=35933 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e9a6cf1f9 endpointID=2174 k8sNamespace=openstack k8sPodName=glance-db-sync-qt9nt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=b7fb35ed-1155-4b7c-9cac-37f6dc5b32c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4e9a6cf1f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2174 identity=35933 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-db-sync-qt9nt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 2b285731-a988-44f0-aecf-199939df045e default }" containerID=3d709502402f7ff7e56fa6b645b340b9e65dead67640e0f96a1c691df0f25a2a datapathConfiguration="&{false false false false false }" interface=lxcaf81346cd3c9 k8sPodName=openstack/glance-rabbit-init-mjh4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d70950240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d70950240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3cf3987e-707a-428c-89da-0720f3eed967,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3cf3987e-707a-428c-89da-0720f3eed967,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3cf3987e-707a-428c-89da-0720f3eed967;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3cf3987e-707a-428c-89da-0720f3eed967;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3d70950240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3d70950240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identity=35788 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3cf3987e-707a-428c-89da-0720f3eed967,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3cf3987e-707a-428c-89da-0720f3eed967,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d70950240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identity=35788 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d70950240 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1550 identity=35788 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d70950240 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1550 identity=35788 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d70950240 endpointID=1550 k8sNamespace=openstack k8sPodName=glance-rabbit-init-mjh4q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3cf3987e-707a-428c-89da-0720f3eed967 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3cf3987e-707a-428c-89da-0720f3eed967 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3d70950240 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1550 identity=35788 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-rabbit-init-mjh4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 4d1309e1-86e4-424f-9db8-8590696a83b6 default }" containerID=eae3fef39c422088e1d875eb6cf3bfa0024fe3394e93ac358246150622682a88 datapathConfiguration="&{false false false false false }" interface=lxcde97d4df4404 k8sPodName=openstack/glance-ks-service-9nndw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eae3fef39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1636 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-9nndw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eae3fef39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1636 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-9nndw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=eae3fef39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1636 identity=16638 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-9nndw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eae3fef39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1636 identity=16638 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-9nndw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eae3fef39c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1636 identity=16638 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-9nndw subsys=endpoint level=info msg="Successful endpoint creation" containerID=eae3fef39c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1636 identity=16638 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-9nndw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eae3fef39c endpointID=1636 k8sNamespace=openstack k8sPodName=glance-ks-service-9nndw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=870b5abe-7e35-41fd-bc5e-5abcd5227968 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=eae3fef39c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1636 identity=16638 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-9nndw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 3b910fc7-b0ba-4098-9e26-fab3833e8126 default }" containerID=e8f7d58394da3fb73c2a3799b3b11d0807c6eda562e2479e6c0367c75f0d7cb6 datapathConfiguration="&{false false false false false }" interface=lxcd85faa32de54 k8sPodName=openstack/glance-ks-endpoints-dbkk4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8f7d58394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8f7d58394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e8f7d58394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8f7d58394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=3306 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8f7d58394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=3306 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8f7d58394 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1523 identity=3306 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8f7d58394 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1523 identity=3306 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8f7d58394 endpointID=1523 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-dbkk4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7856d0bf-8503-416d-a64f-9a6c958d6d7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e8f7d58394 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1523 identity=3306 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/glance-ks-endpoints-dbkk4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 1a15131b-0483-4ce1-8189-be5b059f9d20 default }" containerID=899280274a6b464ee964d13c179f1655b71c6b82c6cc5e1dd55db21bff427f90 datapathConfiguration="&{false false false false false }" interface=lxc2d8dcd0adfbc k8sPodName=openstack/glance-ks-user-9k8l5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=899280274a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-user-9k8l5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=899280274a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-user-9k8l5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=899280274a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=29732 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-user-9k8l5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=899280274a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=29732 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-user-9k8l5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=899280274a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1018 identity=29732 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-user-9k8l5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=899280274a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1018 identity=29732 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-user-9k8l5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 b8096864-bd86-480b-9928-b6cf5b7574a1 default }" containerID=5545a09991c9dbe4451a4dd9c6f7ddd959339f7c99a2270611df213625c31c44 datapathConfiguration="&{false false false false false }" interface=lxcfdcd4670d771 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-t2rgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5545a09991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-t2rgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5545a09991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-t2rgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5545a09991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=15866 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-t2rgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5545a09991 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1940 identity=15866 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-t2rgg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 ab090f74-b6c9-441b-9afe-90979ff9e91e default }" containerID=c0b635214547b6e3e3aebf69108b8f6cf03949a7d15256807e4138b32b659324 datapathConfiguration="&{false false false false false }" interface=lxc09430310ad70 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-f5x57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0b6352145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-f5x57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0b6352145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-f5x57 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0b6352145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=59088 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-f5x57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0b6352145 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=59088 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-f5x57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5545a09991 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1940 identity=15866 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-t2rgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=5545a09991 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1940 identity=15866 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-t2rgg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c0b6352145 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=311 identity=59088 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-f5x57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0b6352145 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=311 identity=59088 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-f5x57 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=899280274a endpointID=1018 k8sNamespace=openstack k8sPodName=glance-ks-user-9k8l5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bc46cef8-b21b-444e-95a9-ec4eb732d72b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=899280274a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1018 identity=29732 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-ks-user-9k8l5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 c765e653-aa2a-447b-8449-b7630004030d default }" containerID=0e47102207dfa99b70efa7c401b3f7d16fe54a2462fe5063a95b5a508bf14db9 datapathConfiguration="&{false false false false false }" interface=lxc0dca0b2a1442 k8sPodName=openstack/glance-metadefs-load-wpkjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e47102207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e47102207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0e47102207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e47102207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 identity=51871 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e47102207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1904 identity=51871 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e47102207 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1904 identity=51871 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e47102207 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1904 identity=51871 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e47102207 endpointID=1904 k8sNamespace=openstack k8sPodName=glance-metadefs-load-wpkjj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b9e0f682-aa96-4bd8-bee8-d87fafaa9550 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0e47102207 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1904 identity=51871 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-metadefs-load-wpkjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 9aff4760-94e6-4cc9-ad31-640553984e5c default }" containerID=314382e1ca9e37ef77f2d9e1f4b7ec3ef5965089d6cbbbf2fd48155d628ab692 datapathConfiguration="&{false false false false false }" interface=lxc1d8d054f8246 k8sPodName=openstack/glance-storage-init-jqvw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=314382e1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-storage-init-jqvw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=314382e1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-storage-init-jqvw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=314382e1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=1133 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-storage-init-jqvw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=314382e1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=1133 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-storage-init-jqvw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=314382e1ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2074 identity=1133 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-storage-init-jqvw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=314382e1ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2074 identity=1133 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-storage-init-jqvw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=314382e1ca endpointID=2074 k8sNamespace=openstack k8sPodName=glance-storage-init-jqvw5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=2d4758c0-f0ed-4b08-85b7-764004a53617 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=314382e1ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2074 identity=1133 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-storage-init-jqvw5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 0e427aec-1047-44bc-9fcb-175a5ef44484 default }" containerID=8ade65807570f2f47095bdb9bf08586489ef1a0c70970dcd5ad131657b5d5d1a datapathConfiguration="&{false false false false false }" interface=lxcf8865d6b7bb6 k8sPodName=openstack/glance-api-8b5f98d96-h7jdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ade658075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-api-8b5f98d96-h7jdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ade658075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-api-8b5f98d96-h7jdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ade658075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-api-8b5f98d96-h7jdg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ade658075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=51674 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-api-8b5f98d96-h7jdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ade658075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=51674 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-api-8b5f98d96-h7jdg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ade658075 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2419 identity=51674 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-api-8b5f98d96-h7jdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ade658075 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2419 identity=51674 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/glance-api-8b5f98d96-h7jdg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 4c8637a1-0ff1-4922-b5f3-a568b2ec438d default }" containerID=0a415192d21e3c91c5cf8b5701414ceda934b5da359c23d01ee091ef8f18d407 datapathConfiguration="&{false false false false false }" interface=lxc6dd77b3ddbdf k8sPodName=openstack/staffeln-api-56f777fb5-6sp6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a415192d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-api-56f777fb5-6sp6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a415192d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-api-56f777fb5-6sp6m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a415192d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identity=4272 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-api-56f777fb5-6sp6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a415192d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=856 identity=4272 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-api-56f777fb5-6sp6m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 60f70bdc-939e-40ee-b43e-437fdf4d59bb default }" containerID=6fe49a74fd75ea96552cd2fe96badaa847c652b6dea6d5ca6c29111033131f62 datapathConfiguration="&{false false false false false }" interface=lxc9e88aa1b7bfc k8sPodName=openstack/staffeln-conductor-6c797fddd6-vzhpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fe49a74fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-conductor-6c797fddd6-vzhpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 cbd85358-23ff-402b-b3e3-92b1e8580120 default }" containerID=f7e4ccd4ee1feb71ad9a8923c71b14615171d4281b493579757b6f174b484e4c datapathConfiguration="&{false false false false false }" interface=lxc431a8fcf07a4 k8sPodName=openstack/staffeln-db-init-mm26c labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=6fe49a74fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-conductor-6c797fddd6-vzhpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="New endpoint" containerID=f7e4ccd4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-db-init-mm26c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7e4ccd4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-db-init-mm26c subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fe49a74fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=22999 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-conductor-6c797fddd6-vzhpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fe49a74fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=22999 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-conductor-6c797fddd6-vzhpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7e4ccd4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=2360 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-db-init-mm26c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7e4ccd4ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=2360 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-db-init-mm26c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a415192d2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=856 identity=4272 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-api-56f777fb5-6sp6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a415192d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=856 identity=4272 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-api-56f777fb5-6sp6m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6fe49a74fd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1801 identity=22999 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-conductor-6c797fddd6-vzhpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fe49a74fd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1801 identity=22999 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-conductor-6c797fddd6-vzhpm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f7e4ccd4ee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=486 identity=2360 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-db-init-mm26c subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7e4ccd4ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=486 identity=2360 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-db-init-mm26c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7e4ccd4ee endpointID=486 k8sNamespace=openstack k8sPodName=staffeln-db-init-mm26c subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=4cd8fde4-1452-43fb-a7d1-c6b5c0d2f1c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=f7e4ccd4ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=486 identity=2360 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-db-init-mm26c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 1d2429c7-92cd-466a-8855-60dda2a07e14 default }" containerID=58a782dca6ec33539d6b8d78e21bb2e3270f8037cbba8f72c16163d0c7195e7e datapathConfiguration="&{false false false false false }" interface=lxc0bd3c211b253 k8sPodName=openstack/staffeln-db-sync-fd4gh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58a782dca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-fd4gh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58a782dca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=512ec05f-4fff-4297-9200-a199391a8f25,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=512ec05f-4fff-4297-9200-a199391a8f25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-fd4gh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=58a782dca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-fd4gh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=512ec05f-4fff-4297-9200-a199391a8f25;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=512ec05f-4fff-4297-9200-a199391a8f25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58a782dca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identity=3469 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=512ec05f-4fff-4297-9200-a199391a8f25,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=512ec05f-4fff-4297-9200-a199391a8f25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-fd4gh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58a782dca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3439 identity=3469 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-fd4gh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58a782dca6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3439 identity=3469 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-fd4gh subsys=endpoint level=info msg="Successful endpoint creation" containerID=58a782dca6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3439 identity=3469 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-fd4gh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager