level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="788.641µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="43.631µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.256204ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="26.092µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=112.035826ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.91µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.681µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="71.492µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="65.403µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="78.381µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="467.693µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.54µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.897283ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.453923ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.441µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.301µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="228.956µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="90.371µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="68.891µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Start hook executed" duration=186.528274ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="212.126µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.131µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.204.0.0/16 level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.816635ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="7.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.663951ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.2635ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="29.151µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.092µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="57.961µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="27.33µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="318.268µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.26µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="291.008µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="931.076µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.302054ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.12µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="26.711µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.204 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.204 ipAddr.ipv6="" k8sNodeIP=162.253.55.204 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.204" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.199" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.204" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.204} {CiliumInternalIP 10.0.0.199}] 10.0.0.0/24 [] [] 10.0.0.151 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37169" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.649704844s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="18.941µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="11.162µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="71.961µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.91µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.010691645s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=319.137652ms file-path=/var/run/cilium/state/templates/4e6f46c118a136ecb8724719a05f6e16755c7c988c81872b54cbc876b6ea2c26/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1009 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 ipv4=10.0.0.151 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identityLabels="reserved:health" ipv4=10.0.0.151 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identity=4 identityLabels="reserved:health" ipv4=10.0.0.151 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.232 fefa87cf-69f3-49ea-bc12-feab45fc3ec1 default }" containerID=73f7d98227d29f6db74a309ddaae9f6957a82f78c65eb37e4a4c61b1df4713f8 datapathConfiguration="&{false false false false false }" interface=lxc6113ec4d37be k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73f7d98227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73f7d98227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=73f7d98227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73f7d98227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identity=20622 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73f7d98227 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2343 identity=20622 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 cb624934-1396-462f-911b-a1c6b9fd6818 default }" containerID=4e684775ea974542ada7ec705f897ca3449e18eee0c76be8c888a8caac0873fe datapathConfiguration="&{false false false false false }" interface=lxc547ea0785542 k8sPodName=kube-system/coredns-7c96b6546b-zpg6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e684775ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zpg6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e684775ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zpg6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e684775ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=52832 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zpg6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e684775ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=52832 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zpg6v subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.077330302s file-path=/var/run/cilium/state/templates/24a5b4353d7245b49fcc89465ace6166f595195a104fa310ddac1e336a81b34f/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=344 identity=4 ipv4=10.0.0.151 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e684775ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=337 identity=52832 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zpg6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73f7d98227 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2343 identity=20622 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e684775ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=337 identity=52832 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zpg6v subsys=daemon level=info msg="Successful endpoint creation" containerID=73f7d98227 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2343 identity=20622 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73f7d98227 endpointID=2343 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-kwrdk subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=5b92cdca-6648-4745-a08b-2d933b04296d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=73f7d98227 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2343 identity=20622 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-kwrdk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 21b50b76-9695-4e8d-93a0-1ac75beef31b default }" containerID=c14588613e0f2770bece1cc3f1e241c7e7b90c888e5ee25d9d76c2bedef7fc6f datapathConfiguration="&{false false false false false }" interface=lxc52c9329a9174 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bkn78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c14588613e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bkn78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c14588613e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bkn78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c14588613e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 identity=535 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bkn78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c14588613e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 identity=535 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bkn78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c14588613e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=732 identity=535 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bkn78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c14588613e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=732 identity=535 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bkn78 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1009 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01009 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01009 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01009 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01009:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1009 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 695f7783-ca16-43ed-8754-85a1eefbaa23 default }" containerID=329097d11a9ebcaf8b18402cd7b23bc138e2328fd8328e2422e461c525aa9391 datapathConfiguration="&{false false false false false }" interface=lxc2726d8820903 k8sPodName=kube-system/coredns-67659f764b-g2wpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=329097d11a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-g2wpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=329097d11a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-g2wpz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=329097d11a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=52832 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-g2wpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=329097d11a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=52832 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-g2wpz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 bd322f30-5000-4df0-9a5c-c7b2cc238078 default }" containerID=967d6642a4812338b8246623f0afc1219ec76af601d4f6eed1ede841180c4cfa datapathConfiguration="&{false false false false false }" interface=lxcc91751515255 k8sPodName=kube-system/coredns-67659f764b-xhwkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=967d6642a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-xhwkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=967d6642a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-xhwkz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=967d6642a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identity=52832 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-xhwkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=967d6642a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2319 identity=52832 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-xhwkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=329097d11a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=614 identity=52832 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-g2wpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=329097d11a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=614 identity=52832 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-g2wpz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=967d6642a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2319 identity=52832 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-xhwkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=967d6642a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2319 identity=52832 ipv4=10.0.0.179 ipv6= k8sPodName=kube-system/coredns-67659f764b-xhwkz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 a45165f9-c82f-41aa-8e18-43f18196103e default }" containerID=2802fb204852cdd759ecf42e3583a75fd0ae6ea6a8cea54b0238eef8e35a9815 datapathConfiguration="&{false false false false false }" interface=lxc74360094fb5c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2802fb2048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2802fb2048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2802fb2048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2802fb2048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=19672 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2802fb2048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=939 identity=19672 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2802fb2048 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=939 identity=19672 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=2802fb2048 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=939 identity=19672 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xfbbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e684775ea endpointID=337 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-zpg6v subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=4e684775ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=337 identity=52832 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zpg6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 8fece513-10ef-4549-94a5-2afb584eee55 default }" containerID=0373482efdbe03ea947a6a449c9faf1128cac36cb9196d0e319dbb040ed90ed3 datapathConfiguration="&{false false false false false }" interface=lxceb0c19df4b55 k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0373482efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0373482efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0373482efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0373482efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identity=11686 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0373482efd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3172 identity=11686 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0373482efd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3172 identity=11686 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0373482efd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3172 identity=11686 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-k88g4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 69564f79-533e-49c1-b298-910fb7c9756e default }" containerID=2d9392b5a7a2bbbc2ac9e2466d00174f8d30d1d4460dcb085a2a063c59a7cde5 datapathConfiguration="&{false false false false false }" interface=lxc9b6406e243ea k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-52x5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d9392b5a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-52x5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 5b8cddae-72fb-4ebe-9c22-2625199ed655 default }" containerID=18900b0741520427999c7f32e4ccd6ca0228b8f867a57514287f9add105dcd9d datapathConfiguration="&{false false false false false }" interface=lxc53375c39a833 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cbj27 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=2d9392b5a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-52x5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=18900b0741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2879 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cbj27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18900b0741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2879 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cbj27 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d9392b5a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 identity=2024 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-52x5t oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=2d9392b5a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 identity=2024 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-52x5t subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18900b0741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2879 identity=9774 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cbj27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18900b0741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2879 identity=9774 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cbj27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18900b0741 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2879 identity=9774 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cbj27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18900b0741 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2879 identity=9774 ipv4=10.0.0.198 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cbj27 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2d9392b5a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2661 identity=2024 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-52x5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d9392b5a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2661 identity=2024 ipv4=10.0.0.58 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-52x5t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 d59e01b2-6a18-4ebb-a784-e37049578ecc default }" containerID=ce5220b1f584096fa478d1887b864ef07d9a9b3571c8e26f49ec648642d969f4 datapathConfiguration="&{false false false false false }" interface=lxcd41b646af5a2 k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce5220b1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 ipv4=10.0.0.212 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce5220b1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.212 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce5220b1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=51409 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.212 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce5220b1f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=51409 ipv4=10.0.0.212 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce5220b1f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3871 identity=51409 ipv4=10.0.0.212 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce5220b1f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3871 identity=51409 ipv4=10.0.0.212 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ce5220b1f5 endpointID=3871 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-pqfsq subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=1017d43e-642b-4e38-b0a1-042dbcdca768 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ce5220b1f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3871 identity=51409 ipv4=10.0.0.212 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-pqfsq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 179fe076-b943-4fc5-8411-41ac77724d3a default }" containerID=21eb2fae2551715dd777ea7a2e37aa8e9255e44b523c0f168c84722d8da887db datapathConfiguration="&{false false false false false }" interface=lxcae58a2bc2995 k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21eb2fae25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21eb2fae25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=15c74562-94f8-41e3-af03-656726dcb848,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=15c74562-94f8-41e3-af03-656726dcb848,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=15c74562-94f8-41e3-af03-656726dcb848;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=15c74562-94f8-41e3-af03-656726dcb848;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21eb2fae25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=24708 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=15c74562-94f8-41e3-af03-656726dcb848,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=15c74562-94f8-41e3-af03-656726dcb848,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21eb2fae25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=24708 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=21eb2fae25 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=714 identity=24708 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll subsys=endpoint level=info msg="Successful endpoint creation" containerID=21eb2fae25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=714 identity=24708 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll subsys=daemon level=info msg="Delete endpoint request" containerID=21eb2fae25 endpointID=714 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-wkbll subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=15c74562-94f8-41e3-af03-656726dcb848 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=15c74562-94f8-41e3-af03-656726dcb848 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=21eb2fae25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=714 identity=24708 ipv4=10.0.0.230 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wkbll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 a4a21b43-9113-4835-9540-a12e61092f17 default }" containerID=9b9ea984b37938de5868633364273615b59a9a030dfc30bf24eace6902916df3 datapathConfiguration="&{false false false false false }" interface=lxc461e06c82872 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wxvzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b9ea984b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wxvzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b9ea984b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wxvzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b9ea984b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identity=54566 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wxvzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b9ea984b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2253 identity=54566 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wxvzc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b9ea984b3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2253 identity=54566 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wxvzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b9ea984b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2253 identity=54566 ipv4=10.0.0.236 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wxvzc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 f6557746-7070-4157-8786-675ca35157ed default }" containerID=0b7574fcfb1cb083e733b84d2a6cb4a51bf4a8205f022c3d3f76d9adb5c70794 datapathConfiguration="&{false false false false false }" interface=lxc285f964c8f8a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b7574fcfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 ipv4=10.0.0.70 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b7574fcfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.70 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b7574fcfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identity=50747 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.70 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b7574fcfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2261 identity=50747 ipv4=10.0.0.70 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b7574fcfb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2261 identity=50747 ipv4=10.0.0.70 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b7574fcfb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2261 identity=50747 ipv4=10.0.0.70 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b7574fcfb endpointID=2261 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-86r4b subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=773e9506-b446-4ccc-b2c1-f2c0551298b4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=0b7574fcfb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2261 identity=50747 ipv4=10.0.0.70 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-86r4b subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=70db9308-4b93-47ff-a7fd-e3b100304e6b] Description:}]" policyAddRequest=4209bc7d-6bd0-43a0-9d29-cb061b85fb66 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4209bc7d-6bd0-43a0-9d29-cb061b85fb66 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=117a4c01-0884-44da-b706-9082d09bc42f] Description:}]" policyAddRequest=3cfc7e2e-9609-4338-a031-d5a866942a17 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3cfc7e2e-9609-4338-a031-d5a866942a17 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.70 adf40a44-b4e2-418b-b244-09e5669bffcf default }" containerID=3650005600f325164f609c1018d590abad5a6660c3683f45dbd1772da6c57886 datapathConfiguration="&{false false false false false }" interface=lxc0de4132d1c44 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hjdbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3650005600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hjdbg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3650005600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hjdbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.202 f84149f2-2187-49c0-8ee7-c2ff05780a2c default }" containerID=c23c22a20d92594f3f0312d077432d0716da689f47cac2b633bb9e7a47f39ec9 datapathConfiguration="&{false false false false false }" interface=lxcdad628fc7a39 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c23c22a20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c23c22a20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3650005600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=54684 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hjdbg oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c23c22a20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3650005600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=54684 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hjdbg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c23c22a20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=13942 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c23c22a20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=960 identity=13942 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3650005600 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1331 identity=54684 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hjdbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3650005600 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1331 identity=54684 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-hjdbg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c23c22a20d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=960 identity=13942 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c23c22a20d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=960 identity=13942 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wtfnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 ddc9d4fa-cdd4-4728-bd92-7ace0e92cb1c default }" containerID=9e311cdc3616ede86b5124bcdccf1f7fdcc335ab05121f9ce5c083303c6ac477 datapathConfiguration="&{false false false false false }" interface=lxc300779ff03e8 k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e311cdc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e311cdc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9e311cdc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9e311cdc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=27359 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e311cdc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2599 identity=27359 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e311cdc36 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2599 identity=27359 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e311cdc36 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2599 identity=27359 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-g2rwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 035c54bf-6896-4e56-8b4f-43790564fffa default }" containerID=698bd5535c965b47694cfde662c76cfda6793b43fc212d94bd87a376c18a5fde datapathConfiguration="&{false false false false false }" interface=lxcb56c118a190f k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=698bd5535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=698bd5535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=698bd5535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=18610 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=698bd5535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=18610 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=698bd5535c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=203 identity=18610 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=698bd5535c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=203 identity=18610 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 5ee899e2-5334-42e5-815e-c006ff2a7c97 default }" containerID=da988068c4a9d2b9ba7f0f433cbfdd4b10248e8c0bfd150b74fc4b1e77e4d50c datapathConfiguration="&{false false false false false }" interface=lxc085c65e62247 k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da988068c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da988068c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da988068c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da988068c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=11196 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da988068c4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3807 identity=11196 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b subsys=endpoint level=info msg="Successful endpoint creation" containerID=da988068c4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3807 identity=11196 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da988068c4 endpointID=3807 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=da988068c4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3807 identity=11196 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f62927fa-5c7c-48d0-9631-7b88e073491b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 9688590e-bec0-45c6-b092-9897decc2f29 default }" containerID=595d526f9a00fe37de0362a779d5a4f10554a103d3300c60b318e3a6d1c3e9c5 datapathConfiguration="&{false false false false false }" interface=lxc43aa3bc64441 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=595d526f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=595d526f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=595d526f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=44084 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=595d526f9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=44084 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=595d526f9a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1933 identity=44084 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=595d526f9a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1933 identity=44084 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2b80e621-01b0-40e3-adfa-3ab1ced838fc] Description:}]" policyAddRequest=6e0d32d8-7c3d-43d0-be5b-32ebb2f3f207 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6e0d32d8-7c3d-43d0-be5b-32ebb2f3f207 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.81 50800e33-f63c-4021-be45-9208228e5a71 default }" containerID=2020e00a05c4dc4cacbc24faa0897acf33604b99071acb5195782312fb789e1b datapathConfiguration="&{false false false false false }" interface=lxc13e11fbcedba k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2020e00a05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2020e00a05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2020e00a05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2020e00a05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3931 identity=11196 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2020e00a05 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3931 identity=11196 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=2020e00a05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3931 identity=11196 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f subsys=daemon level=info msg="Delete endpoint request" containerID=2020e00a05 endpointID=3931 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2020e00a05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3931 identity=11196 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e46310ea-f029-4e19-9357-f0717e69fc6f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 5f0489ee-18de-4f2b-a40b-ccb5dfa9cca2 default }" containerID=fb50b14794de09942981505b9663fe11430f904d7a7f4dbe8b497727004540dc datapathConfiguration="&{false false false false false }" interface=lxc682732208bcc k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb50b14794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb50b14794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb50b14794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=16750 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb50b14794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=16750 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb50b14794 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3 identity=16750 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb50b14794 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3 identity=16750 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=811c8fc8-cbff-4066-9cb6-746e40084f12] Description:}]" policyAddRequest=b238508c-2568-4166-98ef-52cbf5d4f134 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b238508c-2568-4166-98ef-52cbf5d4f134 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 9f2f5d56-aa94-4af3-831d-022827334b71 default }" containerID=84f9361fc77845bf5c0c3a023819df595cb9842f6d658618c0d18e0346c5f903 datapathConfiguration="&{false false false false false }" interface=lxcac5008ac18a4 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84f9361fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84f9361fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84f9361fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identity=14781 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84f9361fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1512 identity=14781 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84f9361fc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1512 identity=14781 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84f9361fc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1512 identity=14781 ipv4=10.0.0.207 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009401166015123027 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.117 92e2014b-8bb5-4683-995c-58cd77521362 default }" containerID=05b3cac878d36ebbf6420f2f9203a2bbd45445201fd5bba34edcfb0a9931566e datapathConfiguration="&{false false false false false }" interface=lxcb0a9b0f82ad3 k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05b3cac878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05b3cac878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=05b3cac878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05b3cac878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 identity=2066 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05b3cac878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 identity=2066 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05b3cac878 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1237 identity=2066 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05b3cac878 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1237 identity=2066 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cdwc4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 7a74b432-b8d9-45ea-abf3-85bb586bcc2e default }" containerID=f0a388eafb243b4d81060f569fb2f1779f1fd735f505a29aff8a77121e45a3a3 datapathConfiguration="&{false false false false false }" interface=lxca831e7aedb51 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8vm4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0a388eafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8vm4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0a388eafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8vm4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0a388eafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=4701 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8vm4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0a388eafb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1029 identity=4701 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8vm4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 221cb134-35ee-4982-b04d-42210fcae231 default }" containerID=6cfbc3bf637d282f6ccc4ff7767a4a49dbb86987f15db5190581e7d65c1ac78d datapathConfiguration="&{false false false false false }" interface=lxc23d89670734f k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r77d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cfbc3bf63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r77d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cfbc3bf63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r77d7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cfbc3bf63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=29831 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r77d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cfbc3bf63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=29831 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r77d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0a388eafb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1029 identity=4701 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8vm4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0a388eafb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1029 identity=4701 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8vm4f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6cfbc3bf63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=496 identity=29831 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r77d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cfbc3bf63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=496 identity=29831 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r77d7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 3d5dead9-d750-4213-a42a-a3649cf31343 default }" containerID=f142f99d481013c41d19a2787d3c9a0d5f9266cabaf2cb1c17f0cead6b771ab8 datapathConfiguration="&{false false false false false }" interface=lxc04fa91bd818c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-27r5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f142f99d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 ipv4=10.0.0.237 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-27r5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f142f99d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.237 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-27r5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f142f99d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 identity=30135 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.237 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-27r5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f142f99d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2598 identity=30135 ipv4=10.0.0.237 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-27r5j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f142f99d48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2598 identity=30135 ipv4=10.0.0.237 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-27r5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=f142f99d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2598 identity=30135 ipv4=10.0.0.237 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-27r5j subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1009 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01009 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01009 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01009 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01009:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1009 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 912f74ec-e228-4c43-b716-a65fbd547f24 default }" containerID=90405a3194d584f8c3c1237dfc51591182012c5a02173165efb7cdbe18dbeea1 datapathConfiguration="&{false false false false false }" interface=lxc992a474de8c3 k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90405a3194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90405a3194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=90405a3194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=90405a3194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=42624 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90405a3194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=42624 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90405a3194 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=720 identity=42624 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp subsys=endpoint level=info msg="Successful endpoint creation" containerID=90405a3194 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=42624 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90405a3194 endpointID=720 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-b2djp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=584d301d-a2fc-4a22-a754-1cf7f4b78dd0 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=90405a3194 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=42624 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-b2djp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 00de4d85-9468-4e64-b07b-8eae6936299e default }" containerID=f0281e1c577ed2582880d0a2de63bb5a6fd1e1fbfc5428b70cd3dbe5b4644551 datapathConfiguration="&{false false false false false }" interface=lxcf3e7a935c6ca k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0281e1c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0281e1c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f0281e1c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0281e1c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=4558 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0281e1c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=4558 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 d81d2149-b855-4fa0-b2d7-a12d33f2f9d3 default }" containerID=f269ce13e32d545a260b63a3e12c29fac8c5f439fa7e19e63b9746995511ea58 datapathConfiguration="&{false false false false false }" interface=lxc6f25312918ac k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qlltv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f269ce13e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qlltv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f269ce13e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qlltv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f269ce13e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=21541 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qlltv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f269ce13e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2683 identity=21541 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qlltv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0281e1c57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1819 identity=4558 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0281e1c57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1819 identity=4558 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-wznrj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f269ce13e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2683 identity=21541 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qlltv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f269ce13e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2683 identity=21541 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-qlltv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 fe0ac837-1eb5-4859-82f9-518975b79f2e default }" containerID=627e6197fd72df5ec8cd0b39ce0dfaae3a0b9917f8358f30348e50bd38321a7c datapathConfiguration="&{false false false false false }" interface=lxcdce0d68d48c5 k8sPodName=monitoring/kube-prometheus-stack-grafana-86859ff594-fkgvj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=627e6197fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86859ff594-fkgvj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=627e6197fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86859ff594-fkgvj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=627e6197fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=3089 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86859ff594-fkgvj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=627e6197fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=3089 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86859ff594-fkgvj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=627e6197fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=186 identity=3089 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86859ff594-fkgvj subsys=endpoint level=info msg="Successful endpoint creation" containerID=627e6197fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=186 identity=3089 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-86859ff594-fkgvj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 f4d8cabb-b880-444c-b986-8577a683ef63 default }" containerID=76a098b86bf654ee324b981e1fc42066c187438d1078da265e2bedbcefee6de6 datapathConfiguration="&{false false false false false }" interface=lxcf978b8aa6481 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76a098b86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76a098b86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1064fdcd-0390-487b-8177-4e1333d28935,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1064fdcd-0390-487b-8177-4e1333d28935,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1064fdcd-0390-487b-8177-4e1333d28935;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1064fdcd-0390-487b-8177-4e1333d28935;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76a098b86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=50258 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1064fdcd-0390-487b-8177-4e1333d28935,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1064fdcd-0390-487b-8177-4e1333d28935,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76a098b86b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=50258 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76a098b86b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3750 identity=50258 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=76a098b86b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3750 identity=50258 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 f69d25cd-5001-414b-96ca-ed04416185da default }" containerID=0fe039d0f745555e72467afbad8bccbd52bd6bcbb21a68379e32ed6f013609a0 datapathConfiguration="&{false false false false false }" interface=lxc9b8c24d4e8c9 k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fe039d0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fe039d0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fe039d0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fe039d0f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=11196 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fe039d0f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3255 identity=11196 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fe039d0f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=11196 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 c4d54198-3ee3-4727-a7ca-5452f244973b default }" containerID=b0ce371ab84908ae7c46ab96d318f8c00d19632c67a33ca723f3bacd986aafb8 datapathConfiguration="&{false false false false false }" interface=lxc69d596bccba6 k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0ce371ab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0ce371ab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b0ce371ab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0ce371ab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=11196 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0ce371ab8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=594 identity=11196 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0ce371ab8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=594 identity=11196 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 subsys=daemon level=info msg="Delete endpoint request" containerID=0fe039d0f7 endpointID=3255 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=76a098b86b endpointID=3750 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-dsvzn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1064fdcd-0390-487b-8177-4e1333d28935 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1064fdcd-0390-487b-8177-4e1333d28935 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0fe039d0f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=11196 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ec2ba127-3e15-450c-925f-5395b6659b0a subsys=endpoint level=info msg="Removed endpoint" containerID=76a098b86b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3750 identity=50258 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dsvzn subsys=endpoint level=info msg="Delete endpoint request" containerID=b0ce371ab8 endpointID=594 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b0ce371ab8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=594 identity=11196 ipv4=10.0.0.147 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef26ad6b-4f7b-48b1-bd15-407e21bbc092 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 46591d71-40a3-4c5d-bf9b-1b21446e823f default }" containerID=e7a323e875b7452fb54a7ef8993792b320eea0d5813cc828bede015d6aea75fd datapathConfiguration="&{false false false false false }" interface=lxcd7cd5d6a3bf8 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7a323e875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7a323e875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e7a323e875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=13081 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7a323e875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=13081 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7a323e875 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=964 identity=13081 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7a323e875 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=964 identity=13081 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.189 7b418ee1-c5f0-4844-8092-a6b7ad521dad default }" containerID=0ca5b5bfc0f30c5fe0aef64932c580f6a71c64c71bd6cbca3b132fd07cd664b2 datapathConfiguration="&{false false false false false }" interface=lxc4cd75f6d32c6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ca5b5bfc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ca5b5bfc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ca5b5bfc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=52100 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ca5b5bfc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=52100 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0ca5b5bfc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1157 identity=52100 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ca5b5bfc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1157 identity=52100 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 40a166ee-b811-4359-9a1d-f93cb46cbb76 default }" containerID=0061368b079c79c33f210d02305c602fc8f58de1fbad8910eb72f2ea8f695965 datapathConfiguration="&{false false false false false }" interface=lxc5455eea8dd4e k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0061368b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0061368b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0061368b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0061368b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=28301 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0061368b07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1350 identity=28301 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 3cc7f3b7-8ca8-4f2d-b746-8ef7e2da3b45 default }" containerID=c92372137ed0d6367dc5921baeecfdb0c2a1e32bcc84cec6190b1bfdd50b6f8c datapathConfiguration="&{false false false false false }" interface=lxc6e8ff13eb398 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.253 7ad2ec2f-4eb8-4b2f-b176-3296e3c45bea default }" containerID=11f31291e8b32ade1ec26df4a5591667ab8615ade722f8dc8930c0875918bd6a datapathConfiguration="&{false false false false false }" interface=lxc5e9bc26a29ba k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c92372137e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=11f31291e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c92372137e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=11f31291e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c92372137e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=43878 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c92372137e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1039 identity=43878 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11f31291e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identity=15723 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11f31291e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identity=15723 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0061368b07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1350 identity=28301 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0061368b07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1350 identity=28301 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-qgkrl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 7d369d78-9db2-40ad-a28b-670c9bc953dc default }" containerID=c49c72a3fd9c39598659a15e42048ab9eb333da7a988c14b2e9eed12fcd6f568 datapathConfiguration="&{false false false false false }" interface=lxc7b8ec029bb9d k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c49c72a3fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c49c72a3fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c49c72a3fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c49c72a3fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identity=11196 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c92372137e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1039 identity=43878 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c92372137e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1039 identity=43878 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=11f31291e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2316 identity=15723 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11f31291e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2316 identity=15723 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c49c72a3fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3969 identity=11196 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c49c72a3fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3969 identity=11196 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 e203653d-9045-4561-a97c-188a06338196 default }" containerID=f866f84638e1ca3d9f330039cbbaceb6d30c582c797375b5a98d641eb6758821 datapathConfiguration="&{false false false false false }" interface=lxce509b8864db6 k8sPodName=monitoring/vector-rk26d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f866f84638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-rk26d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f866f84638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-rk26d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f866f84638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=46700 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-rk26d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f866f84638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=46700 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-rk26d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f866f84638 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=46700 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-rk26d subsys=endpoint level=info msg="Successful endpoint creation" containerID=f866f84638 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=46700 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/vector-rk26d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c49c72a3fd endpointID=3969 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c49c72a3fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3969 identity=11196 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7956a75a-cd24-45a8-aed7-4a43aa409bf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 319d1399-8356-4e60-9087-3495bb686d81 default }" containerID=e5a40c9d81153b3219e887789babd6e04f1ffb93d2c36d93baf17eeb34ade02c datapathConfiguration="&{false false false false false }" interface=lxce5038c4d170b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5a40c9d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5a40c9d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e5a40c9d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5a40c9d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=50189 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5a40c9d81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1873 identity=50189 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5a40c9d81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1873 identity=50189 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5a40c9d81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1873 identity=50189 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.129 3e903ef0-435d-48f4-943c-228952ff7573 default }" containerID=000059ef3ed17761d01e633adf4d68c5a62e588b4079f37b01328a60b7f22835 datapathConfiguration="&{false false false false false }" interface=lxc4460b6962f64 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8s8dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=000059ef3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8s8dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=000059ef3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8s8dd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=000059ef3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=28832 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8s8dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=000059ef3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=28832 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8s8dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=000059ef3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=281 identity=28832 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8s8dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=000059ef3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=28832 ipv4=10.0.0.129 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8s8dd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 494ab108-b96e-48fb-b3d7-3ad0c148f08c default }" containerID=d68c692ca5194851afaff445dfadffd22906793ec2f0de091358c78b80a945ca datapathConfiguration="&{false false false false false }" interface=lxcc7ab1c887ec3 k8sPodName=openstack/memcached-memcached-6479589586-pzfwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d68c692ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pzfwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d68c692ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pzfwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d68c692ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=53326 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pzfwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d68c692ca5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=53326 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pzfwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d68c692ca5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1466 identity=53326 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pzfwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d68c692ca5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1466 identity=53326 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pzfwp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.174 a9d50a22-48b5-4692-b140-e7447ef1105f default }" containerID=ba76d723d6d19b2e3028b28630be2a1b1f7e82926424a80097c00825c90908e2 datapathConfiguration="&{false false false false false }" interface=lxc163abcb11005 k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba76d723d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba76d723d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba76d723d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba76d723d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=11196 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba76d723d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2199 identity=11196 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba76d723d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=11196 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 subsys=daemon level=info msg="Delete endpoint request" containerID=ba76d723d6 endpointID=2199 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ba76d723d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=11196 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff51863f-bed6-4fcb-b7c3-86007ed7fde6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 c0fd0a07-3cfe-4549-a0a1-6795e9e7007b default }" containerID=36d05116411e6becfc6cc1228854db3d674842775a357ae1078f6844041d3139 datapathConfiguration="&{false false false false false }" interface=lxc224b7f1d99ff k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36d0511641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36d0511641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=36d0511641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=36d0511641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=33180 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36d0511641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=33180 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36d0511641 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=954 identity=33180 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36d0511641 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=954 identity=33180 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 fd0a7599-b354-475a-a56f-07c629950dd9 default }" containerID=1eaa08367a2cceb4cb28aea7d7dd31811dd1ebe615ab6db8dea6de1d8147b374 datapathConfiguration="&{false false false false false }" interface=lxc3bb90cef694f k8sPodName=openstack/keystone-api-5ff8698cfb-pzt46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1eaa08367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-api-5ff8698cfb-pzt46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1eaa08367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-api-5ff8698cfb-pzt46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1eaa08367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=4165 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-api-5ff8698cfb-pzt46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1eaa08367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=4165 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-api-5ff8698cfb-pzt46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 d192fd35-4dd3-4b2b-96b9-88b93b6180ba default }" containerID=b11e9016a891c461824523c31560d679891ed941c572e920fa01578305b3b617 datapathConfiguration="&{false false false false false }" interface=lxc4d8dd71684a5 k8sPodName=openstack/keystone-credential-setup-qdfvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b11e9016a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-qdfvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b11e9016a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe87df18-9440-482b-abef-29ca07895973,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fe87df18-9440-482b-abef-29ca07895973,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-qdfvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fe87df18-9440-482b-abef-29ca07895973;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=fe87df18-9440-482b-abef-29ca07895973;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b11e9016a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=11583 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe87df18-9440-482b-abef-29ca07895973,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fe87df18-9440-482b-abef-29ca07895973,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-qdfvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b11e9016a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=11583 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-qdfvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1eaa08367a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1378 identity=4165 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-api-5ff8698cfb-pzt46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1eaa08367a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1378 identity=4165 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-api-5ff8698cfb-pzt46 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b11e9016a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=878 identity=11583 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-qdfvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b11e9016a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=878 identity=11583 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-qdfvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b11e9016a8 endpointID=878 k8sNamespace=openstack k8sPodName=keystone-credential-setup-qdfvm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fe87df18-9440-482b-abef-29ca07895973 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=fe87df18-9440-482b-abef-29ca07895973 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b11e9016a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=878 identity=11583 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-credential-setup-qdfvm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 711e2f87-2a5b-46f6-ba26-a7c1d9787037 default }" containerID=d07ccb17b676c479bf812ff144aecd68f11b9821bcfecf5520e84f4fba87b3bd datapathConfiguration="&{false false false false false }" interface=lxce5f976cd657c k8sPodName=openstack/keystone-db-init-24rmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d07ccb17b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d07ccb17b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d07ccb17b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d07ccb17b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=46899 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d07ccb17b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=46899 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d07ccb17b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3220 identity=46899 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d07ccb17b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3220 identity=46899 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d07ccb17b6 endpointID=3220 k8sNamespace=openstack k8sPodName=keystone-db-init-24rmg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=71b35c4b-ae53-4de1-a84b-8cea7a04e0f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d07ccb17b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3220 identity=46899 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-24rmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 20839e5e-952d-4290-81da-7293db62f31b default }" containerID=f8c02b9df5ae032e5753f7382dc785d8857b686dcde5536273249960f84487a6 datapathConfiguration="&{false false false false false }" interface=lxc21db8537732a k8sPodName=openstack/keystone-fernet-setup-fw8kc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8c02b9df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8c02b9df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8c02b9df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8c02b9df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=1505 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8c02b9df5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=1505 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8c02b9df5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=190 identity=1505 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8c02b9df5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=1505 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8c02b9df5 endpointID=190 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-fw8kc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9918087f-a7ce-494e-9e81-42357aa65ebb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f8c02b9df5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=1505 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-fw8kc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 764a7435-faeb-425b-a447-6fdffe932077 default }" containerID=ef8e31c9fa8e1f934a24e6ffe56b75c7dc82b221bab7958b879ec703ffc02bb3 datapathConfiguration="&{false false false false false }" interface=lxcac3d05567828 k8sPodName=openstack/keystone-db-sync-x25pf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef8e31c9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-db-sync-x25pf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef8e31c9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-db-sync-x25pf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ef8e31c9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=53494 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-db-sync-x25pf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef8e31c9fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=53494 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-db-sync-x25pf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef8e31c9fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=93 identity=53494 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-db-sync-x25pf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef8e31c9fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=53494 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-db-sync-x25pf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef8e31c9fa endpointID=93 k8sNamespace=openstack k8sPodName=keystone-db-sync-x25pf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9d6db4fb-3483-4087-85e1-65ad5fdce3d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef8e31c9fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=53494 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-db-sync-x25pf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 8497c4ec-51a0-4967-a96c-9108d18c9cad default }" containerID=898a919d1e88aa258791b4bdeb0ec21e6e04ebacfcb34db73035ee4e1f7322fc datapathConfiguration="&{false false false false false }" interface=lxc2b90591d015c k8sPodName=openstack/keystone-rabbit-init-qjq6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=898a919d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-qjq6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=898a919d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=10718262-f282-41a6-b576-e5f9e920ec99,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10718262-f282-41a6-b576-e5f9e920ec99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-qjq6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=10718262-f282-41a6-b576-e5f9e920ec99;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=10718262-f282-41a6-b576-e5f9e920ec99;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=898a919d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=21799 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=10718262-f282-41a6-b576-e5f9e920ec99,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10718262-f282-41a6-b576-e5f9e920ec99,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-qjq6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=898a919d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=21799 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-qjq6f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=898a919d1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2673 identity=21799 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-qjq6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=898a919d1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2673 identity=21799 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-qjq6f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=898a919d1e endpointID=2673 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-qjq6f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=10718262-f282-41a6-b576-e5f9e920ec99 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=10718262-f282-41a6-b576-e5f9e920ec99 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=898a919d1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2673 identity=21799 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-qjq6f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 e01a1d80-4433-46d1-a15a-0f2e246a7387 default }" containerID=e8b50cf48a5aaae4ff73b78b13b08f93e0147247793ace2542e9439ead58ce2d datapathConfiguration="&{false false false false false }" interface=lxc86cf5703e48b k8sPodName=openstack/keystone-domain-manage-gs2l8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8b50cf48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-gs2l8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8b50cf48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-gs2l8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8b50cf48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identity=2827 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-gs2l8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8b50cf48a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identity=2827 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-gs2l8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e8b50cf48a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=176 identity=2827 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-gs2l8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8b50cf48a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=176 identity=2827 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-gs2l8 subsys=daemon level=info msg="Delete endpoint request" containerID=e8b50cf48a endpointID=176 k8sNamespace=openstack k8sPodName=keystone-domain-manage-gs2l8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=b339ea27-5287-4adc-be11-57b63c7433e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e8b50cf48a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=176 identity=2827 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-domain-manage-gs2l8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 48ef4c69-7a8f-4791-a5c1-22b60bef7611 default }" containerID=4d93049394b213ea89849ce619b70b5dfc91595f8894c5fb64da3a0760567fd7 datapathConfiguration="&{false false false false false }" interface=lxcccff66c728ae k8sPodName=openstack/keystone-bootstrap-kxffh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d93049394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-bootstrap-kxffh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d93049394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-bootstrap-kxffh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d93049394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=21127 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-bootstrap-kxffh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d93049394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=21127 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-bootstrap-kxffh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d93049394 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1249 identity=21127 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-bootstrap-kxffh subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d93049394 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1249 identity=21127 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-bootstrap-kxffh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d93049394 endpointID=1249 k8sNamespace=openstack k8sPodName=keystone-bootstrap-kxffh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=87fef6dd-3849-4202-ad77-2a5497f2751e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4d93049394 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1249 identity=21127 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-bootstrap-kxffh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 8924d0c6-2b4b-466f-9973-b6e6bfa0fd3f default }" containerID=b9241c54608d3945c37e4140f3c1f81aafc05890e1d63011d8120a573c1b3022 datapathConfiguration="&{false false false false false }" interface=lxcba62bf035743 k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9241c5460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9241c5460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9241c5460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9241c5460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3969 identity=11196 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9241c5460 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3969 identity=11196 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9241c5460 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3969 identity=11196 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb subsys=daemon level=info msg="Delete endpoint request" containerID=b9241c5460 endpointID=3969 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b9241c5460 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3969 identity=11196 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bac3247b-ccf0-40d0-bc59-ac8fafa357eb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 7c926265-283e-4e59-b07a-9299626bad62 default }" containerID=42f190735026bdb5c247bad0d707682b34df473c4190bc23851b9750d6a97844 datapathConfiguration="&{false false false false false }" interface=lxcc0636d5558cc k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42f1907350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42f1907350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=42f1907350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42f1907350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=7239 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42f1907350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=7239 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42f1907350 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1789 identity=7239 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42f1907350 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1789 identity=7239 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03422971309535082 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.32 1346c60b-0c6e-4ae6-a460-c49bda89f5da default }" containerID=e290d57eb29266c9aff7e33406623e83b1fac318a444a92a5a35055c67ab75f1 datapathConfiguration="&{false false false false false }" interface=lxc59aab89d4100 k8sPodName=openstack/barbican-api-57b6d7bd77-vhqpx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e290d57eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-57b6d7bd77-vhqpx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e290d57eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-57b6d7bd77-vhqpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e290d57eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=708 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-57b6d7bd77-vhqpx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e290d57eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=708 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-57b6d7bd77-vhqpx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 f296edaa-8802-47e5-ab5d-6509a2c7bd7d default }" containerID=c267891957d6d33606d2629c42cff573bdc19a334beabaf0389554c4836dc8c1 datapathConfiguration="&{false false false false false }" interface=lxcc6cefb0dd23f k8sPodName=openstack/barbican-db-init-g5rtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c267891957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-g5rtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c267891957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-g5rtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c267891957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 identity=35141 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-g5rtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c267891957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2618 identity=35141 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-g5rtb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e290d57eb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3356 identity=708 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-57b6d7bd77-vhqpx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e290d57eb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3356 identity=708 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-api-57b6d7bd77-vhqpx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c267891957 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2618 identity=35141 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-g5rtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c267891957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2618 identity=35141 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-g5rtb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c267891957 endpointID=2618 k8sNamespace=openstack k8sPodName=barbican-db-init-g5rtb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b75fcf7d-98ab-4c2e-adab-99e4423b01d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c267891957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2618 identity=35141 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-g5rtb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 ee24ebcf-cb39-4b36-96ee-1e60b967b62f default }" containerID=591714c23c408cd9164321c08eb42a904e0964d6dbf8495f3a49ec59240fda5a datapathConfiguration="&{false false false false false }" interface=lxca4a225520e79 k8sPodName=openstack/barbican-db-sync-bpcsb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=591714c23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=591714c23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=591714c23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=591714c23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=24370 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=591714c23c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=24370 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=591714c23c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1801 identity=24370 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb subsys=endpoint level=info msg="Successful endpoint creation" containerID=591714c23c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=24370 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=591714c23c endpointID=1801 k8sNamespace=openstack k8sPodName=barbican-db-sync-bpcsb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=5c1b763a-5bba-4f26-adc2-709575bb0cf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=591714c23c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=24370 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-db-sync-bpcsb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 d5a068c8-2592-455b-a353-327f18009eb8 default }" containerID=22b17e5b2a5c9b8c9a7de4af10b168c37f6fc31613faa82e50ecfc7ac415a3ae datapathConfiguration="&{false false false false false }" interface=lxcd30a192bc8da k8sPodName=openstack/barbican-rabbit-init-zwtzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22b17e5b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22b17e5b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=22b17e5b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22b17e5b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=40729 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22b17e5b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=553 identity=40729 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22b17e5b2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=553 identity=40729 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=22b17e5b2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=40729 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22b17e5b2a endpointID=553 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-zwtzl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ef77c572-e5be-475b-9546-b7db4e5612e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=22b17e5b2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=553 identity=40729 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-zwtzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 ca0fb81e-7ca6-49dc-a9fe-1961d3f402ae default }" containerID=3b90d219cffd90918c9bf2ec0b97cdc585837293a233070dfc6e3221760ab88d datapathConfiguration="&{false false false false false }" interface=lxc2144502d7713 k8sPodName=openstack/barbican-ks-service-gttrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b90d219cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-gttrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b90d219cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-gttrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b90d219cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=36079 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-gttrx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3b90d219cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=36079 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-gttrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b90d219cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=36079 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-gttrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b90d219cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=36079 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-gttrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b90d219cf endpointID=1038 k8sNamespace=openstack k8sPodName=barbican-ks-service-gttrx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=eb0007e6-37be-4872-bbfd-d6f7640f4c34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3b90d219cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=36079 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/barbican-ks-service-gttrx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 ab53605a-d249-4e0a-8035-8f98e1d35014 default }" containerID=14751e5232435bed9c04772f425036258b4b373b6da7cfbeb5caed15ccd05d8e datapathConfiguration="&{false false false false false }" interface=lxce12a2341e1fe k8sPodName=openstack/barbican-ks-endpoints-7w6bs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14751e5232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14751e5232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44645397-7fa6-4d1f-9142-60877539b89b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=44645397-7fa6-4d1f-9142-60877539b89b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=14751e5232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=44645397-7fa6-4d1f-9142-60877539b89b;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=44645397-7fa6-4d1f-9142-60877539b89b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14751e5232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=40054 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44645397-7fa6-4d1f-9142-60877539b89b,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=44645397-7fa6-4d1f-9142-60877539b89b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14751e5232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=40054 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14751e5232 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4 identity=40054 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs subsys=endpoint level=info msg="Successful endpoint creation" containerID=14751e5232 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=40054 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14751e5232 endpointID=4 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-7w6bs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=44645397-7fa6-4d1f-9142-60877539b89b k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=44645397-7fa6-4d1f-9142-60877539b89b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=14751e5232 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4 identity=40054 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7w6bs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 f4b0c6d3-7f2d-485b-881b-7358a033b150 default }" containerID=205f41523d760a23f63c0855181e2ea2a8c50e17f66749e3c2ec2508bf7351e0 datapathConfiguration="&{false false false false false }" interface=lxcb5381b82c57d k8sPodName=openstack/barbican-ks-user-8pp9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=205f41523d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-ks-user-8pp9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=205f41523d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-ks-user-8pp9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=205f41523d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identity=10876 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-ks-user-8pp9v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=205f41523d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identity=10876 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-ks-user-8pp9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=205f41523d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3041 identity=10876 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-ks-user-8pp9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=205f41523d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3041 identity=10876 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-ks-user-8pp9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=205f41523d endpointID=3041 k8sNamespace=openstack k8sPodName=barbican-ks-user-8pp9v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b739ec1a-3dbe-4d74-961c-155ec6f5d6ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=205f41523d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3041 identity=10876 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/barbican-ks-user-8pp9v subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.226 94f528a2-39f9-4eec-b1ba-46e7ba9dfcac default }" containerID=5d46b197303e232ef2eb1fd66e9497d047cb716727db0a6ca35709e517b5c608 datapathConfiguration="&{false false false false false }" interface=lxc17a24e76b2be k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d46b19730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d46b19730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5d46b19730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d46b19730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=21522 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d46b19730 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=21522 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d46b19730 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=660 identity=21522 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d46b19730 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=660 identity=21522 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-96wrc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 5b866cfd-1975-4581-a294-86f97dcc82ad default }" containerID=c47341f2dbdf1c48161a60622aec1d5465f9278f1ca98fd100cb6c88868cae0b datapathConfiguration="&{false false false false false }" interface=lxc649c4841127a k8sPodName=openstack/rook-ceph-detect-version-4bglp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c47341f2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c47341f2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c47341f2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c47341f2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=6124 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c47341f2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=6124 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c47341f2db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=634 identity=6124 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c47341f2db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=6124 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c47341f2db endpointID=634 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-4bglp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=1853f618-a110-47d7-b2df-5c39d3f0598e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c47341f2db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=6124 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4bglp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 e98f6135-c243-463d-b780-ce2e9e34bee8 default }" containerID=bf8951d64d2e4c0fdb3c09079687f96f9fa8749a6a484ef11d184a6373459298 datapathConfiguration="&{false false false false false }" interface=lxcc209ab45f6e7 k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf8951d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf8951d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bf8951d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf8951d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=2635 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf8951d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=2635 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf8951d64d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=544 identity=2635 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf8951d64d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=544 identity=2635 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf8951d64d endpointID=544 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-9h2gn subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=76fa006f-7e46-43ef-ae75-fe9cc3846dc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=bf8951d64d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=544 identity=2635 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-9h2gn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 3024bfbf-2aba-46c8-bbcf-d13d0d92e2dc default }" containerID=f9d9e057d64c3f9f90e240a8c9436c592459ce56d2c0923e4d62eefae4b6a078 datapathConfiguration="&{false false false false false }" interface=lxca7751510f829 k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9d9e057d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9d9e057d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9d9e057d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=11196 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9d9e057d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=11196 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9d9e057d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=786 identity=11196 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9d9e057d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=11196 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 subsys=daemon level=info msg="Delete endpoint request" containerID=f9d9e057d6 endpointID=786 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f9d9e057d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=11196 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-64547dde-5e04-4547-a264-eba7f6ad99f7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 8f24d020-3383-4e94-ac94-eb4935290391 default }" containerID=4bda05383dc00a3bfa05f5d16973b6b99ba47ff1734cae6787bdd088e16e5a8b datapathConfiguration="&{false false false false false }" interface=lxc25bae3443ead k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bda05383d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bda05383d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bda05383d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=11003 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4bda05383d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=11003 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bda05383d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1373 identity=11003 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bda05383d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1373 identity=11003 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 ff88af4f-fe2f-4489-b2e1-e9a9d1006c56 default }" containerID=bd5210803562fc5e98e580ec62cd7787e0521417b5f5a2773f0f1a70e763a05b datapathConfiguration="&{false false false false false }" interface=lxc74ba938b958c k8sPodName=openstack/glance-db-init-2h4c9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd52108035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-2h4c9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd52108035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-2h4c9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd52108035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identity=1300 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-2h4c9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd52108035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identity=1300 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-2h4c9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd52108035 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3073 identity=1300 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-2h4c9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd52108035 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3073 identity=1300 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-2h4c9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 c124252f-d20c-4151-aa48-48e6bc2aca08 default }" containerID=415fd434a40d395a2283c5d96ae67fd3abebce10d219c04511f42fc1d4bb726a datapathConfiguration="&{false false false false false }" interface=lxcd9e7a7b5d978 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=415fd434a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=415fd434a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=415fd434a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=415fd434a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=34100 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=415fd434a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=34100 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 02421cec-04d1-4a15-a903-4814467a0dd0 default }" containerID=adabd80542b40aa55f0a37b887ab8277c233805b5aa440c543a70affda61e00c datapathConfiguration="&{false false false false false }" interface=lxc447cf3b9cf17 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ml57j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adabd80542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ml57j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adabd80542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ml57j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adabd80542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 identity=4463 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ml57j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adabd80542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 identity=4463 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ml57j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=415fd434a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3956 identity=34100 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb subsys=endpoint level=info msg="Successful endpoint creation" containerID=415fd434a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3956 identity=34100 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4w4wb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=adabd80542 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=489 identity=4463 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ml57j subsys=endpoint level=info msg="Successful endpoint creation" containerID=adabd80542 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=489 identity=4463 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ml57j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd52108035 endpointID=3073 k8sNamespace=openstack k8sPodName=glance-db-init-2h4c9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=57dddc4a-22f9-4e1b-ad2f-59e29968b3a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bd52108035 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3073 identity=1300 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-db-init-2h4c9 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 cf91b905-43dd-4c7d-86ca-548ce6ec88e7 default }" containerID=54049678b18e6f62620efc3df7d10de4e2264097f347828315373cc6c88a7a1d datapathConfiguration="&{false false false false false }" interface=lxc4b81ec6a5c1e k8sPodName=openstack/glance-db-sync-cnfpt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54049678b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54049678b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=54049678b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54049678b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=26427 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54049678b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=26427 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54049678b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1117 identity=26427 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt subsys=endpoint level=info msg="Successful endpoint creation" containerID=54049678b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=26427 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=54049678b1 endpointID=1117 k8sNamespace=openstack k8sPodName=glance-db-sync-cnfpt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=eb08f457-67f4-49a5-ab83-cc47053b21d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=54049678b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=26427 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-db-sync-cnfpt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 7ea79d11-2f8c-41a1-93ec-92f31e0a00fb default }" containerID=b35362513bd1e9750c6a014536f27b4fd198b43077450fe0d9e917939ad841ce datapathConfiguration="&{false false false false false }" interface=lxcdc44b7e5597e k8sPodName=openstack/glance-rabbit-init-l7fz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b35362513b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b35362513b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b35362513b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b35362513b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identity=37744 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b35362513b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2383 identity=37744 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b35362513b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2383 identity=37744 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b35362513b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2383 identity=37744 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b35362513b endpointID=2383 k8sNamespace=openstack k8sPodName=glance-rabbit-init-l7fz2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e84fda4b-ec05-439e-9479-6f018b101c5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b35362513b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2383 identity=37744 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-rabbit-init-l7fz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 8d1be84b-150b-43ba-947e-65c5aa3b31d6 default }" containerID=66f0e9ff324c6ac50b479e9898b21b8d6a70174bb6892a4a2072706fc12024ca datapathConfiguration="&{false false false false false }" interface=lxcdba38c783e78 k8sPodName=openstack/glance-ks-service-bddhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66f0e9ff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-service-bddhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66f0e9ff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-service-bddhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66f0e9ff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=18464 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-service-bddhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66f0e9ff32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=18464 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-service-bddhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66f0e9ff32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=907 identity=18464 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-service-bddhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=66f0e9ff32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=18464 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-service-bddhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66f0e9ff32 endpointID=907 k8sNamespace=openstack k8sPodName=glance-ks-service-bddhh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=6acd74bc-7fae-4235-a300-0e3e96cef84d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=66f0e9ff32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=18464 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-service-bddhh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 cf7e1eb9-775c-4931-af73-056e9e140fa0 default }" containerID=6f9f4696dc6d89b4b541b08d1b21531d835e7e2607460974dad985be1be2198d datapathConfiguration="&{false false false false false }" interface=lxc9ee0af850378 k8sPodName=openstack/glance-ks-endpoints-fjllx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f9f4696dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-ks-endpoints-fjllx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f9f4696dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=72a20475-a9fb-455e-990c-2e6638336d58,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=72a20475-a9fb-455e-990c-2e6638336d58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-ks-endpoints-fjllx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=72a20475-a9fb-455e-990c-2e6638336d58;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=72a20475-a9fb-455e-990c-2e6638336d58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6f9f4696dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=46727 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=72a20475-a9fb-455e-990c-2e6638336d58,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=72a20475-a9fb-455e-990c-2e6638336d58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-ks-endpoints-fjllx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f9f4696dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3921 identity=46727 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-ks-endpoints-fjllx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f9f4696dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3921 identity=46727 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-ks-endpoints-fjllx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f9f4696dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3921 identity=46727 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-ks-endpoints-fjllx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f9f4696dc endpointID=3921 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-fjllx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=72a20475-a9fb-455e-990c-2e6638336d58 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=72a20475-a9fb-455e-990c-2e6638336d58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6f9f4696dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3921 identity=46727 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/glance-ks-endpoints-fjllx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 b228ba69-aff5-44e7-8edb-b64858839c9a default }" containerID=cef367f2c8abb83f9050df278893b2a45587996f9a7f61a8550edb41476979cc datapathConfiguration="&{false false false false false }" interface=lxc6ad643148258 k8sPodName=openstack/glance-ks-user-kd8gt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cef367f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-kd8gt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cef367f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-kd8gt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cef367f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identity=57770 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-kd8gt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cef367f2c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identity=57770 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-kd8gt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cef367f2c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2596 identity=57770 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-kd8gt subsys=endpoint level=info msg="Successful endpoint creation" containerID=cef367f2c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2596 identity=57770 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-kd8gt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cef367f2c8 endpointID=2596 k8sNamespace=openstack k8sPodName=glance-ks-user-kd8gt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=7b9e80ba-7f3f-43eb-a0c0-9b5a30407e18 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cef367f2c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2596 identity=57770 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/glance-ks-user-kd8gt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 22c3edc9-2e16-4fec-b2af-fb8a2c08ba71 default }" containerID=7817af1434be0630fa1385defb2c34adbc64c6e5fe0c2230a4ad8b65cb4b2c01 datapathConfiguration="&{false false false false false }" interface=lxc4cf4de41808a k8sPodName=openstack/glance-metadefs-load-9lmk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7817af1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-metadefs-load-9lmk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7817af1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-metadefs-load-9lmk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7817af1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=52731 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-metadefs-load-9lmk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7817af1434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=52731 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-metadefs-load-9lmk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7817af1434 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3743 identity=52731 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-metadefs-load-9lmk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7817af1434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3743 identity=52731 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-metadefs-load-9lmk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7817af1434 endpointID=3743 k8sNamespace=openstack k8sPodName=glance-metadefs-load-9lmk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=4e5f5cee-4d24-4f21-bc9d-deb7dabc7141 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7817af1434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3743 identity=52731 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-metadefs-load-9lmk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 557271cb-7f17-41a6-a46a-dcc354bb4995 default }" containerID=2e6b6bd869f712a4fe667a3c912b4d1260c2b08419c620588e818ba654de5a46 datapathConfiguration="&{false false false false false }" interface=lxc18530041670b k8sPodName=openstack/glance-storage-init-j4nbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e6b6bd869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-storage-init-j4nbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e6b6bd869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-storage-init-j4nbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e6b6bd869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identity=43386 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-storage-init-j4nbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e6b6bd869 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identity=43386 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-storage-init-j4nbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e6b6bd869 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2697 identity=43386 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-storage-init-j4nbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e6b6bd869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2697 identity=43386 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-storage-init-j4nbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e6b6bd869 endpointID=2697 k8sNamespace=openstack k8sPodName=glance-storage-init-j4nbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=db26640b-95d2-4cdb-987e-31e314c197e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2e6b6bd869 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2697 identity=43386 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-storage-init-j4nbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 a38b4bc0-8744-48b6-80fb-c0cec677fbfa default }" containerID=f7612577817668ece92f902a8737bda20a58435c2a5d877f3eb09a4d967952e8 datapathConfiguration="&{false false false false false }" interface=lxc961d91e74e1f k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f761257781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f761257781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f761257781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f761257781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=27242 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f761257781 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=27242 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f761257781 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=33 identity=27242 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f761257781 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=33 identity=27242 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/glance-api-545bd7fc89-pbdf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 cdbccdec-6ecd-4794-abb8-5d6a472ef313 default }" containerID=135ecdb9518415a7fe500df0037d7fc2435a86d40c55969c4a4f1e37c2c40b06 datapathConfiguration="&{false false false false false }" interface=lxc4725e55081a8 k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=135ecdb951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=135ecdb951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=135ecdb951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=135ecdb951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 identity=9863 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=135ecdb951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3592 identity=9863 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 061599ff-30fb-4d21-b237-8b6f45c4f6fa default }" containerID=43c0d65a535c174c9bcf340c69607dc55cbd273082a385bd8ce2a86aa804403c datapathConfiguration="&{false false false false false }" interface=lxc45b2e56956a9 k8sPodName=openstack/staffeln-db-init-4jdzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43c0d65a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-4jdzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43c0d65a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-4jdzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43c0d65a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=33980 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-4jdzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43c0d65a53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=33980 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-4jdzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=135ecdb951 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3592 identity=9863 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=135ecdb951 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3592 identity=9863 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/staffeln-api-78b45d47bc-qxjw4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43c0d65a53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=940 identity=33980 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-4jdzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=43c0d65a53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=940 identity=33980 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-4jdzw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 e867f536-2465-410a-944b-d5eb98bb1986 default }" containerID=7d9a8abdb05e4908a427b5303336f8b23349165c9db414d3df8709c9eff91761 datapathConfiguration="&{false false false false false }" interface=lxcdb97f8d2ef6d k8sPodName=openstack/staffeln-conductor-86dcb788b8-c8sxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d9a8abdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/staffeln-conductor-86dcb788b8-c8sxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d9a8abdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/staffeln-conductor-86dcb788b8-c8sxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d9a8abdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identity=19375 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/staffeln-conductor-86dcb788b8-c8sxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d9a8abdb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identity=19375 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/staffeln-conductor-86dcb788b8-c8sxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d9a8abdb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3008 identity=19375 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/staffeln-conductor-86dcb788b8-c8sxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d9a8abdb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3008 identity=19375 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/staffeln-conductor-86dcb788b8-c8sxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43c0d65a53 endpointID=940 k8sNamespace=openstack k8sPodName=staffeln-db-init-4jdzw subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=b2c9369c-db16-4628-a194-2b4e5f91c4fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=43c0d65a53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=940 identity=33980 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-db-init-4jdzw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 37e9a87b-f517-434b-82a9-6e9e4239d146 default }" containerID=6b36bda0063a4b8a87ed90da3b1f28ba759ab0c93ce2ce4bade99394fad90659 datapathConfiguration="&{false false false false false }" interface=lxcb932728de535 k8sPodName=openstack/staffeln-db-sync-zpvx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b36bda006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-sync-zpvx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b36bda006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=30cb3b89-e1ff-4745-ae0c-3f11fedd4e97,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=30cb3b89-e1ff-4745-ae0c-3f11fedd4e97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-sync-zpvx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=30cb3b89-e1ff-4745-ae0c-3f11fedd4e97;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=30cb3b89-e1ff-4745-ae0c-3f11fedd4e97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6b36bda006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-sync-zpvx2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6b36bda006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=64900 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=30cb3b89-e1ff-4745-ae0c-3f11fedd4e97,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=30cb3b89-e1ff-4745-ae0c-3f11fedd4e97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-sync-zpvx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b36bda006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=64900 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-sync-zpvx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b36bda006 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=457 identity=64900 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-sync-zpvx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b36bda006 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=457 identity=64900 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/staffeln-db-sync-zpvx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager